MervinPraison PraisonAI vulnerabilities

Newest CVEs

• CVE-2026-57117

  PraisonAI: Compute-bridged file tools allow shell command injection

  MervinPraison · PraisonAI

  High8.8
• CVE-2026-57146

  PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default

  MervinPraison · PraisonAI

  High7.5
• CVE-2026-57144

  PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

  MervinPraison · PraisonAI

  High8.8
• CVE-2026-57142

  PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml

  MervinPraison · PraisonAI

  High7.8
• CVE-2026-57121

  PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API

  MervinPraison · PraisonAI

  High8.1
• CVE-2026-57116

  PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation

  MervinPraison · PraisonAI

  Critical9.8
• CVE-2026-57114

  PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding

  MervinPraison · PraisonAI

  High7.2
• CVE-2026-57113

  PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

  MervinPraison · PraisonAI

  High8.1
• CVE-2026-56840

  PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools

  MervinPraison · PraisonAI

  High8.8
• CVE-2026-56838

  PraisonAI recipe.run_stream skips dangerous-tool policy enforcement

  MervinPraison · PraisonAI

  High7.8