← Browse

Mervinpraison

58 CVEs
CVE IDSeverityProduct / summaryPublished
CVE-2026-55525 HIGH 7.5 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the web_crawl function validates onl…● PoC 2026-08-25 CVE-2026-55526 HIGH 8.5 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does… 2026-08-25 CVE-2026-55527 HIGH 7.1 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the FileMemory constructor joins uns… 2026-08-25 CVE-2026-55528 HIGH 8.2 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.aut…● PoC 2026-08-25 CVE-2026-55529 MEDIUM 6.9 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream _validate_origin metho…● PoC 2026-08-25 CVE-2026-55530 MEDIUM 6.1 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, ast_grep_rewrite lacks the @require_…● PoC 2026-08-25 CVE-2026-55531 MEDIUM 6.5 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream mcp_post handler creat…● PoC 2026-08-25 CVE-2026-55532 HIGH 7.6 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, MCP HTTP Stream _validate_origin uses requ… 2026-08-25 CVE-2026-55533 HIGH 8.2 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, create_auth_middleware() allows requests w…● PoC 2026-08-25 CVE-2026-55534 HIGH 8.6 Praisonai — PraisonAI is a multi-agent teams system. From praisonai 4.6.34 until 4.6.58, praisonai serve agents accepts --…● PoC 2026-08-25 CVE-2026-55535 MEDIUM 6.8 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path f…● PoC 2026-08-25 CVE-2026-55536 CRITICAL 9.1 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks… 2026-08-25 CVE-2026-55537 HIGH 7.1 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() ac… 2026-08-25 CVE-2026-55538 HIGH 7.3 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, praisonai serve agents parses config["api_…● PoC 2026-08-25 CVE-2026-55539 HIGH 8.6 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API create_app function mounts /a… 2026-08-25 CVE-2026-55540 HIGH 7.1 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, is_path_within_directory() uses os.path.ab…● PoC 2026-08-25 CVE-2026-55541 HIGH 8.8 Praisonai — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve… 2026-08-25 CVE-2026-48169 HIGH 8.8 Praisonai Platform — PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two author…● PoC 2026-08-07 CVE-2026-48168 CRITICAL 10 Praisonai — PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub Actions workfl…● PoC 2026-08-05 CVE-2026-55522 HIGH 7.8 Praisonai — PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1…● PoC 2026-08-05 CVE-2026-55523 HIGH 7.7 Praisonai — PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.web_cra…● PoC 2026-08-05 CVE-2026-55524 HIGH 7.5 Praisonai — PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool performs its SSRF che…● PoC 2026-08-05 CVE-2026-47390 MEDIUM 5.5 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40…● PoC 2026-07-21 CVE-2026-47391 CRITICAL 9.8 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example e…● PoC 2026-07-21 CVE-2026-47392 CRITICAL 9.9 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40…● PoC 2026-07-21 CVE-2026-47393 CRITICAL 9.8 Praisonai — PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a…● PoC 2026-07-21 CVE-2026-47394 HIGH 8.7 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GHSA-9mqq-jqxf-grvw / CVE-2026-4…● PoC 2026-07-21 CVE-2026-47395 MEDIUM 5.5 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40…● PoC 2026-07-21 CVE-2026-47396 CRITICAL 9.8 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server exposes a network-fa…● PoC 2026-07-21 CVE-2026-47397 HIGH 7.1 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonA…● PoC 2026-07-21 CVE-2026-47398 HIGH 8.1 Praisonai — PraisonAI is a multi-agent teams system. The v4.6.32 chokepoint refactor (which patched CVE-2026-44334 / GHSA-…● PoC 2026-07-21 CVE-2026-47399 HIGH 8.8 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, t…● PoC 2026-07-21 CVE-2026-47405 HIGH 8.8 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47406 HIGH 8.1 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47407 CRITICAL 9.4 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, t…● PoC 2026-07-21 CVE-2026-47408 MEDIUM 6.5 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47409 HIGH 8.1 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47410 CRITICAL 9.8 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47411 MEDIUM 6.5 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47412 HIGH 8.1 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47413 CRITICAL 9.6 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47414 HIGH 7.6 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47415 HIGH 8.3 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47416 CRITICAL 9.6 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 a…● PoC 2026-07-21 CVE-2026-47417 HIGH 8.1 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47418 HIGH 8.1 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47419 HIGH 8.3 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-60085 HIGH 8.7 Praisonai — PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox… 2026-07-15 CVE-2026-60087 MEDIUM 6.9 Praisonai — PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial …● PoC 2026-07-15 CVE-2026-61427 MEDIUM 6.9 Praisonai — PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api…● PoC 2026-07-15 CVE-2026-61430 HIGH 8.4 Praisonai — PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl tool that valida…● PoC 2026-07-15 CVE-2026-61433 HIGH 8.5 Praisonai — PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source c… 2026-07-15 CVE-2026-61435 HIGH 8.8 Praisonai — PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints (src/prai…● PoC 2026-07-15 CVE-2026-61436 HIGH 8.8 Praisonai — PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing unauthenti…● PoC 2026-07-15 CVE-2026-61438 HIGH 7 Praisonai — PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_pyt…● PoC 2026-07-15 CVE-2026-61440 HIGH 7.1 Praisonai — PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspac…● PoC 2026-07-15 CVE-2026-61443 HIGH 8.6 Praisonai — PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that e…● PoC 2026-07-15 CVE-2026-61446 HIGH 8.6 Praisonai — PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager… 2026-07-15