CVE-2023-6019

CVE-2023-6019 - Anyscale Ray Dashboard Unauthenticated RCE PoC exploit for CVE-2023-6019 — Remote Code Execution via unauthenticated Ray Dashboard Jobs API. Made by oguiii Description Anyscale Ray is an open-source framework for distributed ML/AI workloads. Versions prior to 2.6.4 expose a Jobs...

CVE-2026-14242

A user with the Editor role can perform unauthorized actions, such as deleting, moving, pushing, or pulling Git Sync managed resources , in folders where they only have view access. This is due to an incorrect authorization flaw in the jobs resource API , which fails to perform necessary folder p...

CVE-2026-14242 Authorization bypass in the Git Sync provisioning jobs API

A user with the Editor role could delete, move, push or pull Git Sync managed resources in folders where they only had view access, by creating a provisioning job through the jobs resource API, which skipped the folder permission checks incorrect authorization...

CVE-2026-57114

PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhookurl when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound t...

EUVD-2026-108890

PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhookurl when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound t...

CVE-2026-57114 PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding

PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhookurl when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound t...

CVE-2026-57114

The PraisonAI multi-agent system (versions 4.5.126 through 4.6.57 ) is vulnerable to a Server-Side Request Forgery (SSRF) via DNS rebinding . The flaw exists in the Async Jobs API because the webhook_url is validated during request parsing and object construction, but this validation is not tied ...

CVE-2026-57114 PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding

PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhookurl when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound t...

Mervin Praison PraisonAI race condition vulnerability

Versions 4.5.126 through 4.6.59 of Mervin Praison PraisonAI contain a security vulnerability. This vulnerability arises because the Async Jobs API fails to bind the validation of webhookurl to subsequent network requests. When sendwebhook passes the original hostname to httpx.AsyncClient.post, it...

PYSEC-2026-4249 PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

Summary PraisonAI's Async Jobs API enables its API-key middleware only when PRAISONAIJOBSAPIKEY is set, so by default every endpoint is unauthenticated. An unauthenticated POST /api/v1/runs accepts an attacker-controlled webhookurl; on job completion the server POSTs the job payload to it via...

PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

SummaryPraisonAI's Async Jobs API enables its API-key middleware only when PRAISONAIJOBSAPIKEY is set, so by default every endpoint is unauthenticated. An unauthenticated POST /api/v1/runs accepts an attacker-controlled webhookurl; on job completion the server POSTs the job payload to it via http...

PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

Summary PraisonAI's Async Jobs API enables its API-key middleware only when PRAISONAIJOBSAPIKEY is set, so by default every endpoint is unauthenticated. An unauthenticated POST /api/v1/runs accepts an attacker-controlled webhookurl; on job completion the server POSTs the job payload to it via...

GHSA-4W49-GWV8-FPJG PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

Summary PraisonAI's Async Jobs API enables its API-key middleware only when PRAISONAIJOBSAPIKEY is set, so by default every endpoint is unauthenticated. An unauthenticated POST /api/v1/runs accepts an attacker-controlled webhookurl; on job completion the server POSTs the job payload to it via...

EUVD-2026-42896

PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF...

PT-2026-108713

Name of the Vulnerable Software and Affected Versions praisonai version 4.6.63 Description The Async Jobs API fails to enforce authentication by default, as the API-key middleware is only active when the PRAISONAI JOBS API KEY environment variable is set. This allows unauthenticated access to the...

CVE-2026-57119

PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API accepts an absolute or traversing agentfile path in POST /api/v1/runs and passes it to the job executor without a workspace allowlist or boundary check. A remote caller can cause the server to open files...

CVE-2026-57125

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthenticated POST /api/v1/runs Jobs API accepts attacker-controlled agentyaml, and the approve field can mark executecommand as YAML-approved before @requireapproval checks critical tools. This...

CVE-2026-57131

PraisonAI (a Python multi-agent framework on PyPI) ships a standalone async-jobs HTTP server whose /api/v1/runs/... endpoints are entirely unauthenticated prior to version 4.6.58 . The root cause is a missing authentication layer: create_app adds only CORS middleware (which lists Authorization in...

CVE-2026-57131 praisonai: Jobs API exposes agent-execution endpoints with no authentication

PraisonAI is a multi-agent teams system. Prior to 4.6.58, praisonai.jobs.server.createapp mounts praisonai.jobs.router.createrouter under /api/v1/runs without authentication or per-job authorization. Network clients can submit attacker-controlled prompts and agent configuration, list and read job...

CVE-2026-57131 praisonai: Jobs API exposes agent-execution endpoints with no authentication

PraisonAI is a multi-agent teams system. Prior to 4.6.58, praisonai.jobs.server.createapp mounts praisonai.jobs.router.createrouter under /api/v1/runs without authentication or per-job authorization. Network clients can submit attacker-controlled prompts and agent configuration, list and read job...