Mervinpraison
58 CVEsCVE IDSeverityProduct / summaryPublished
CVE-2026-55525
HIGH 7.5
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the web_crawl function validates onl…● PoC
2026-08-25
CVE-2026-55526
HIGH 8.5
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does…
2026-08-25
CVE-2026-55527
HIGH 7.1
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the FileMemory constructor joins uns…
2026-08-25
CVE-2026-55528
HIGH 8.2
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.aut…● PoC
2026-08-25
CVE-2026-55529
MEDIUM 6.9
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream _validate_origin metho…● PoC
2026-08-25
CVE-2026-55530
MEDIUM 6.1
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, ast_grep_rewrite lacks the @require_…● PoC
2026-08-25
CVE-2026-55531
MEDIUM 6.5
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream mcp_post handler creat…● PoC
2026-08-25
CVE-2026-55532
HIGH 7.6
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, MCP HTTP Stream _validate_origin uses requ…
2026-08-25
CVE-2026-55533
HIGH 8.2
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, create_auth_middleware() allows requests w…● PoC
2026-08-25
CVE-2026-55534
HIGH 8.6
Praisonai — PraisonAI is a multi-agent teams system. From praisonai 4.6.34 until 4.6.58, praisonai serve agents accepts --…● PoC
2026-08-25
CVE-2026-55535
MEDIUM 6.8
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path f…● PoC
2026-08-25
CVE-2026-55536
CRITICAL 9.1
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks…
2026-08-25
CVE-2026-55537
HIGH 7.1
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() ac…
2026-08-25
CVE-2026-55538
HIGH 7.3
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, praisonai serve agents parses config["api_…● PoC
2026-08-25
CVE-2026-55539
HIGH 8.6
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API create_app function mounts /a…
2026-08-25
CVE-2026-55540
HIGH 7.1
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, is_path_within_directory() uses os.path.ab…● PoC
2026-08-25
CVE-2026-55541
HIGH 8.8
Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve…
2026-08-25
CVE-2026-48169
HIGH 8.8
Praisonai Platform — PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two author…● PoC
2026-08-07
CVE-2026-48168
CRITICAL 10
Praisonai — PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub Actions workfl…● PoC
2026-08-05
CVE-2026-55522
HIGH 7.8
Praisonai — PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1…● PoC
2026-08-05
CVE-2026-55523
HIGH 7.7
Praisonai — PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.web_cra…● PoC
2026-08-05
CVE-2026-55524
HIGH 7.5
Praisonai — PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool performs its SSRF che…● PoC
2026-08-05
CVE-2026-47390
MEDIUM 5.5
Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40…● PoC
2026-07-21
CVE-2026-47391
CRITICAL 9.8
Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example e…● PoC
2026-07-21
CVE-2026-47392
CRITICAL 9.9
Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40…● PoC
2026-07-21
CVE-2026-47393
CRITICAL 9.8
Praisonai — PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a…● PoC
2026-07-21
CVE-2026-47394
HIGH 8.7
Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GHSA-9mqq-jqxf-grvw / CVE-2026-4…● PoC
2026-07-21
CVE-2026-47395
MEDIUM 5.5
Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40…● PoC
2026-07-21
CVE-2026-47396
CRITICAL 9.8
Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server exposes a network-fa…● PoC
2026-07-21
CVE-2026-47397
HIGH 7.1
Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonA…● PoC
2026-07-21
CVE-2026-47398
HIGH 8.1
Praisonai — PraisonAI is a multi-agent teams system. The v4.6.32 chokepoint refactor (which patched CVE-2026-44334 / GHSA-…● PoC
2026-07-21
CVE-2026-47399
HIGH 8.8
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, t…● PoC
2026-07-21
CVE-2026-47405
HIGH 8.8
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47406
HIGH 8.1
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47407
CRITICAL 9.4
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, t…● PoC
2026-07-21
CVE-2026-47408
MEDIUM 6.5
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47409
HIGH 8.1
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47410
CRITICAL 9.8
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47411
MEDIUM 6.5
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47412
HIGH 8.1
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47413
CRITICAL 9.6
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47414
HIGH 7.6
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47415
HIGH 8.3
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47416
CRITICAL 9.6
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 a…● PoC
2026-07-21
CVE-2026-47417
HIGH 8.1
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47418
HIGH 8.1
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-47419
HIGH 8.3
Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC
2026-07-21
CVE-2026-60085
HIGH 8.7
Praisonai — PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox…
2026-07-15
CVE-2026-60087
MEDIUM 6.9
Praisonai — PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial …● PoC
2026-07-15
CVE-2026-61427
MEDIUM 6.9
Praisonai — PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api…● PoC
2026-07-15
CVE-2026-61430
HIGH 8.4
Praisonai — PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl tool that valida…● PoC
2026-07-15
CVE-2026-61433
HIGH 8.5
Praisonai — PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source c…
2026-07-15
CVE-2026-61435
HIGH 8.8
Praisonai — PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints (src/prai…● PoC
2026-07-15
CVE-2026-61436
HIGH 8.8
Praisonai — PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing unauthenti…● PoC
2026-07-15
CVE-2026-61438
HIGH 7
Praisonai — PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_pyt…● PoC
2026-07-15
CVE-2026-61440
HIGH 7.1
Praisonai — PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspac…● PoC
2026-07-15
CVE-2026-61443
HIGH 8.6
Praisonai — PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that e…● PoC
2026-07-15
CVE-2026-61446
HIGH 8.6
Praisonai — PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager…
2026-07-15