Skip to contentMervinpraison Praisonai vulnerabilities
- mervinpraison praisonaiPraisonAI: Unauthenticated Event Injection via SSE `/publish` EndpointCVE-2026-57128Fix available4.3 Medium
- mervinpraison praisonai-platformpraisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDORCVE-2026-47419Fix available8.3 High
- mervinpraison praisonai-platformpraisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}CVE-2026-47412Fix available8.1 High
- mervinpraison praisonai-platformpraisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDORCVE-2026-47415Fix available8.3 High
- mervinpraison praisonai-platformpraisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/membersCVE-2026-47413Fix available9.6 Critical
- mervinpraison praisonai-platformpraisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}CVE-2026-47411Fix available6.5 Medium
- mervinpraison praisonai-platformpraisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDORCVE-2026-47417Fix available8.1 High
- mervinpraison praisonai-platformpraisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDORCVE-2026-47418Fix available8.1 High
- mervinpraison praisonai-platformpraisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH /workspaces/{id}/members/{user_id}CVE-2026-47416Fix available9.6 Critical
- mervinpraison praisonai-platformpraisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE /workspaces/{id}/members/{user_id}CVE-2026-47409Fix available8.1 High
- mervinpraison praisonai-platformpraisonai-platform: Label endpoints accept any label_id and any issue_id without workspace ownership check, cross-workspace label edit/delete and issue-label-link IDORCVE-2026-47414Fix available7.6 High
- mervinpraison praisonai-platformpraisonai-platform: Dependency endpoints accept any issue_id and dep_id without workspace ownership check, cross-workspace issue linking + read + delete IDORCVE-2026-47406Fix available8.1 High
- mervinpraison praisonai-platformpraisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unsetCVE-2026-47410Fix available9.8 Critical
- mervinpraison praisonai-platformPraisonAI Platform missing role checks let any workspace member become owner and take over workspace membershipCVE-2026-47405Fix available8.8 High
- mervinpraison praisonai-platformPraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object IDCVE-2026-47399Fix available8.8 High
- mervinpraison praisonai-platformPraisonAI Platform has a cross-workspace IDOR + member-role privilege escalationCVE-2026-47407Fix available9.4 Critical
- mervinpraison praisonai-platformpraisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownershipCVE-2026-47408Fix available6.5 Medium
- mervinpraison praisonai-platformPraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform APICVE-2026-48169Fix available8.8 High
- mervinpraison praisonaiPraisonAI has an Arbitrary File Write in Python APICVE-2026-47397Fix available7.1 High
- mervinpraison praisonaiPraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool executionCVE-2026-47391Fix available9.8 Critical
- mervinpraison praisonaiPraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validateCVE-2026-47394Fix available8.7 High
- mervinpraison praisonai, < 1.6.40 +1 morePraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)CVE-2026-47392Fix available9.9 Critical
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model contextCVE-2026-47395Fix available5.5 Medium
- mervinpraison praisonaiPraisonAI `deploy --type api` emits a Flask server with authentication disabled by defaultCVE-2026-47393Fix available9.8 Critical
- mervinpraison praisonaiPraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unsetCVE-2026-47396Fix available9.8 Critical
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI spider_tools SSRF protection bypass via alternate loopback host encodingsCVE-2026-47390Fix available5.5 Medium
- mervinpraison praisonaiPraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334CVE-2026-47398Fix available8.1 High
- mervinpraison praisonaiPraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`CVE-2026-44340Fix available8.7 High
- mervinpraison praisonai, praison praisonaiagents +1 morePraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables executeCVE-2026-44339Fix available8.6 High
- mervinpraison praisonaiPraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow executionCVE-2026-44338Public exploitFix availableEPSS 32.6%7.3 High
- mervinpraison praisonaiPraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queriesCVE-2026-44337Fix available6.3 Medium
- mervinpraison praisonaiPraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injectionCVE-2026-44336Fix available9.4 Critical
- mervinpraison praisonaiPraisonAI: Unauthenticated RCE via `tool_override.py`CVE-2026-44334Fix available8.4 High
- mervinpraison praisonai, praison praisonaiagents +1 moreSSRF bypass in PraisonAICVE-2026-44335Fix available7.7 High
- mervinpraison praisonai, praison praisonaiagents +1 morePraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)CVE-2026-41496Fix available8.1 High
- mervinpraison praisonaiIncomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAICVE-2026-41497Fix available9.8 Critical
- mervinpraison praisonaiPraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential PersistenceCVE-2026-403139.1 Critical
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessionsCVE-2026-40289Fix available9.1 Critical
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI: Critical RCE via `type: job` workflow YAMLCVE-2026-40288Fix available9.8 Critical
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI has RCE via Automatic tools.py ImportCVE-2026-40287Fix available8.4 High
- mervinpraison praisonaiPraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queriesCVE-2026-40315Fix available7.2 High
- mervinpraison praisonaiPraisonAI - Tool Approval Cache Bypass via Coarse-Grained CachingCVE-2026-56074Fix available6.8 Medium
- mervinpraison praisonaiPraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode OverrideCVE-2026-56075Fix available8.7 High
- mervinpraison praisonaiagentsPraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallbackCVE-2026-40160Fix available7.1 High
- mervinpraison praisonaiPraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess ExecutionCVE-2026-40159Fix available5.5 Medium
- mervinpraison praisonaiPraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonaiCVE-2026-40158Fix available8.6 High
- mervinpraison praisonaiPraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`CVE-2026-40157Fix available9.4 Critical
- mervinpraison praisonaiPraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` LoadingCVE-2026-40156Fix available7.8 High
- mervinpraison praisonaiPraisonAI Affected by Untrusted Remote Template Code ExecutionCVE-2026-40154Fix available9.3 Critical
- mervinpraison praisonaiPraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOSCVE-2026-40151Fix available5.3 Medium
- Show moreLoading…