Lucene search
+L

54 matches found

Kitploit
Kitploit
added 2026/09/15 9:28 a.m.9 views

CVE-2023-6019

CVE-2023-6019 - Anyscale Ray 仪表盘未授权远程代码执行 CVE-2023-6019 的 PoC 利用程序 — 通过未经认证的 Ray 仪表盘 Jobs API 实现远程代码执行。 由 oguiii 制作 描述 Anyscale Ray 是一个用于分布式 ML/AI 工作负载的开源框架。版本 早于 2.6.4 通过 Ray 仪表盘(默认端口 8265)暴露了一个 Jobs 提交 API,没有任何身份验证 ,允许未认证的攻击者提交任意作业并在主机上实现远程代码执行 。 CVE: CVE-2023-6019 严重性: 严重 CVSS 9.8 受影响版本: Ray...

9.8CVSS7.9AI score0.7463EPSS
SaveExploits18References1
NVD
NVD
added 2026/09/14 3:17 p.m.4 views

CVE-2026-57125

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthenticated POST /api/v1/runs Jobs API accepts attacker-controlled agentyaml, and the approve field can mark executecommand as YAML-approved before @requireapproval checks critical tools. This...

9.8CVSS0.00413EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/14 3:06 p.m.27 views

CVE-2026-57131

PraisonAI (a Python multi-agent framework on PyPI) ships a standalone async-jobs HTTP server whose /api/v1/runs/... endpoints are entirely unauthenticated prior to version 4.6.58 . The root cause is a missing authentication layer: create_app adds only CORS middleware (which lists Authorization in...

9.8CVSS0.00972EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/14 3:06 p.m.24 views

CVE-2026-57131 praisonai: Jobs API exposes agent-execution endpoints with no authentication

PraisonAI is a multi-agent teams system. Prior to 4.6.58, praisonai.jobs.server.createapp mounts praisonai.jobs.router.createrouter under /api/v1/runs without authentication or per-job authorization. Network clients can submit attacker-controlled prompts and agent configuration, list and read job...

9.8CVSS0.00972EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/14 2:58 p.m.22 views

CVE-2026-57119

PraisonAI (a multi-agent LLM orchestration framework) is vulnerable to unauthenticated Local File Inclusion via the agent_file parameter in POST /api/v1/runs. Prior to 4.6.59 , the field accepts any absolute or traversing filesystem path without validation or allowlist, and the executor passes it...

7.5CVSS0.00361EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/14 2:19 p.m.27 views

CVE-2026-57125 PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthenticated POST /api/v1/runs Jobs API accepts attacker-controlled agentyaml, and the approve field can mark executecommand as YAML-approved before @requireapproval checks critical tools. This...

9.8CVSS0.00413EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/14 2:19 p.m.19 views

CVE-2026-57125

PraisonAI is a multi-agent teams system exposed as pip packages praisonai and praisonaiagents. The vulnerability chains two weaknesses: the POST /api/v1/runs Jobs API endpoint lacks authentication (missing Depends(verify_token)), and an attacker-controlled approve field in the submitted workflow ...

9.8CVSS0.00413EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/14 2:19 p.m.5 views

EUVD-2026-77531

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthenticated POST /api/v1/runs Jobs API accepts attacker-controlled agentyaml, and the approve field can mark executecommand as YAML-approved before @requireapproval checks critical tools. This...

9.8CVSS0.00413EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/25 4:16 p.m.9 views

CVE-2026-55539

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API createapp function mounts /api/v1/runs without authentication. Any reachable caller can submit jobs, read results, cancel runs, or delete jobs using operator credentials. The fix adds PRAISONAIJOBSAPIKEY middleware f...

8.6CVSS0.00387EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/25 3:16 p.m.10 views

CVE-2026-55535

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validatewebhookurl path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhookurl can later resolve to 127.0.0.1, 169.254.169.254, or another internal address...

6.8CVSS0.00219EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/25 3:14 p.m.9 views

GHSA-2JGC-F764-C5R2 PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete

Summary PraisonAI's async Jobs API the FastAPI service in praisonai/jobs/ installs its router with no authentication middleware, no router-level dependency, and no per-route auth check. Any caller who can reach the jobs server can submit agent jobs executed against the operator's configured LLM...

8.6CVSS6.1AI score0.00387EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/08/25 3:14 p.m.9 views

PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete

Summary PraisonAI's async Jobs API the FastAPI service in praisonai/jobs/ installs its router with no authentication middleware, no router-level dependency, and no per-route auth check. Any caller who can reach the jobs server can submit agent jobs executed against the operator's configured LLM...

8.6CVSS8.2AI score0.28571EPSS
SaveExploits3References4Affected Software1
CVE
CVE
added 2026/08/25 3:14 p.m.27 views

CVE-2026-55539

PraisonAI, a multi-agent teams system, exposed its async Jobs API (/api/v1/runs) without authentication prior to version 4.6.51. The create_app function mounted the endpoint with no access control, allowing any reachable caller to submit jobs, read results, cancel runs, or delete jobs using opera...

8.6CVSS5.3AI score0.00387EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/25 3:14 p.m.10 views

CVE-2026-55539 PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API createapp function mounts /api/v1/runs without authentication. Any reachable caller can submit jobs, read results, cancel runs, or delete jobs using operator credentials. The fix adds PRAISONAIJOBSAPIKEY middleware f...

8.6CVSS5.5AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/25 3:14 p.m.32 views

CVE-2026-55539 PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API createapp function mounts /api/v1/runs without authentication. Any reachable caller can submit jobs, read results, cancel runs, or delete jobs using operator credentials. The fix adds PRAISONAIJOBSAPIKEY middleware f...

8.6CVSS0.00387EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/25 3:14 p.m.10 views

EUVD-2026-65522

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API createapp function mounts /api/v1/runs without authentication. Any reachable caller can submit jobs, read results, cancel runs, or delete jobs using operator credentials. The fix adds PRAISONAIJOBSAPIKEY middleware f...

8.6CVSS5.3AI score0.00387EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/25 3:01 p.m.7 views

CVE-2026-55535 PraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validatewebhookurl path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhookurl can later resolve to 127.0.0.1, 169.254.169.254, or another internal address...

6.8CVSS5.6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/25 3:01 p.m.38 views

CVE-2026-55535 PraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validatewebhookurl path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhookurl can later resolve to 127.0.0.1, 169.254.169.254, or another internal address...

6.8CVSS0.00219EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.15 views

PT-2026-81326

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The Jobs API contains a flaw where the validate webhook url function fails open when a socket.gaierror occurs during DNS resolution. This allows the webhook url parameter to bypass validation if t...

6.8CVSS5.4AI score0.00219EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.14 views

PT-2026-81348

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The Jobs API in PraisonAI lacks authentication middleware, router-level dependencies, and per-route authorization checks. This allows any caller who can reach the jobs server to submit agent jobs...

8.6CVSS5.3AI score0.00387EPSS
SaveExploits0References12
Rows per page
Query Builder