Skip to contentMervinpraison Praisonai vulnerabilities
- mervinpraison praisonaiBrowser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)CVE-2026-55536Fix available9.1 Critical
- mervinpraison praisonaiPraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP serverCVE-2026-55532Fix available7.6 High
- mervinpraison praisonaiPraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secretCVE-2026-55533Fix available8.2 High
- mervinpraison praisonaiPraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and deleteCVE-2026-55539Fix available8.6 High
- mervinpraison praisonaiPraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable locationCVE-2026-55527Fix available7.1 High
- mervinpraison praisonaiPraisonAI: `--api-key` flag on `praisonai serve` is not properly enforcedCVE-2026-55541Fix available8.8 High
- mervinpraison praisonaiPraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook_url validationCVE-2026-55535Fix available6.8 Medium
- mervinpraison praisonaiPraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114CVE-2026-55537Fix available7.1 High
- mervinpraison praisonaiPraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticatedCVE-2026-55538Fix available7.3 High
- mervinpraison praisonaiPraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinksCVE-2026-55540Fix available7.1 High
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation toolCVE-2026-55530Fix available6.1 Medium
- mervinpraison praisonaiPraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent executionCVE-2026-55534Fix available8.6 High
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)CVE-2026-55526Fix available8.5 High
- mervinpraison praisonaiPraisonAI: Unauthenticated unbounded session accumulation in the PraisonAI MCP HTTP server (memory exhaustion; session TTL never enforced)CVE-2026-55531Fix available6.5 Medium
- mervinpraison praisonai, praisonaiagents +1 morepraisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862)CVE-2026-55528Fix available8.2 High
- mervinpraison praisonaiPraisonAI: Origin validation bypass in MCP HTTP Stream transport allows browser-mediated unauthenticated tool execution on local MCP serverCVE-2026-55529Fix available6.9 Medium
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI: SSRF via redirect-following in praisonaiagents web_crawlCVE-2026-55525Fix available7.5 High
- mervinpraison praisonaiPraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)CVE-2026-55524Fix available7.5 High
- mervinpraison praisonaiPraisonAI has a`web_crawl` SSRF protection bypass via unchecked redirect targetsCVE-2026-55523Fix available7.7 High
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe codeCVE-2026-55522Fix available7.8 High
- mervinpraison praisonaiPraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch nameCVE-2026-4816810.0 Critical
- mervinpraison praisonaiPraisonAI before 1.6.78 Remote Code Execution via Plugin Auto-DiscoveryCVE-2026-61446Fix available8.6 High
- mervinpraison praisonaiPraisonAI before 1.6.78 Remote Code Execution via SkillToolsCVE-2026-61443Fix available8.6 High
- mervinpraison praisonaiPraisonAI Platform before 0.1.9 Authorization Bypass via Label EndpointsCVE-2026-61440Fix available7.1 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Remote Code Execution via Broken AST SandboxCVE-2026-61438Fix available7.0 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Missing Webhook Signature VerificationCVE-2026-61436Fix available8.8 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Authentication Bypass via Host Header SpoofingCVE-2026-61435Fix available8.8 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Code Injection via API deployment generatorCVE-2026-61433Fix available8.5 High
- mervinpraison praisonaiPraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawlCVE-2026-61430Fix available8.4 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Authentication Bypass via HTTP-streamCVE-2026-61427Fix available6.9 Medium
- mervinpraison praisonaiPraisonAI before 1.6.78 Tool Approval Cache BypassCVE-2026-60087Fix available6.9 Medium
- mervinpraison praisonaiPraisonAI before 4.6.78 Unenforced Security Policy in Subprocess SandboxCVE-2026-60085Fix available8.7 High
- mervinpraison praisonaiPraisonAI before 1.6.78 Remote Code Execution via CodeAgentCVE-2026-61447Public exploitFix availableEPSS 15.2%10.0 Critical
- mervinpraison praisonaiPraisonAI before 4.6.78 Arbitrary File Write and Command ExecutionCVE-2026-61445Fix available9.4 Critical
- mervinpraison praisonaiPraisonAI Platform before 0.1.9 Authorization Bypass via PATCHCVE-2026-61442Fix available7.1 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Prompt Injection Defense BypassCVE-2026-61439Fix available8.7 High
- mervinpraison praisonaiPraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backendCVE-2026-61429Fix available8.4 High
- mervinpraison praisonaiPraisonAI AgentMail before 4.6.78 Message Injection via WebhookCVE-2026-61428Fix available6.9 Medium
- mervinpraison praisonaiPraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure DefaultsCVE-2026-61426Fix available8.8 High
- mervinpraison praisonaiPraisonAI before 4.6.78 SQL/CQL Injection via vector dimensionCVE-2026-60090Fix available9.3 Critical
- mervinpraison praisonaiPraisonAI before 4.6.78 Path Traversal via Custom CommandsCVE-2026-60088Fix available6.8 Medium
- mervinpraison praisonaiPraisonAI: Code Injection via f-string Interpolation in Deploy API Server GenerationCVE-2026-62176Fix available9.1 Critical
- mervinpraison praisonaiPraisonAI before 4.6.78 Code Injection via f-stringCVE-2026-614449.4 Critical
- mervinpraison praisonai-platformPraisonAI: Platform members can delete owner issue dependencies through member-owned related issuesCVE-2026-62179Fix available6.5 Medium
- mervinpraison praisonaiPraisonAI Platform before 0.1.9 Authorization Bypass via DependenciesCVE-2026-614417.1 High
- mervinpraison praisonaiPraisonAI before 1.6.78 Remote Code Execution via tools.pyCVE-2026-61437Fix available8.5 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Allowlist Bypass via find -execCVE-2026-61434Fix available8.7 High
- mervinpraison praisonaiPraisonAI FastContext before 1.6.78 Path TraversalCVE-2026-61432Fix available6.9 Medium
- mervinpraison praisonaiPraisonAI before 4.6.78 Path Traversal via ContextGathererCVE-2026-61431Fix available6.8 Medium
- mervinpraison praisonaiPraisonAI before 4.6.78 Unauthenticated SSRF via webhook_urlCVE-2026-60091Fix available6.9 Medium
- Show moreLoading…