PT-2026-81318

Name of the Vulnerable Software and Affected Versions praisonaiagents versions prior to 1.6.58 Description A Server-Side Request Forgery SSRF issue exists in the multi-agent teams system. The function host is blocked in spider tools.py fails to perform DNS resolution on hostnames before they are...

PT-2026-81325

Name of the Vulnerable Software and Affected Versions praisonaiagents versions prior to 1.6.58 Description An arbitrary file write issue exists due to improper sanitization of the user id parameter in the FileMemory. init function. When the FileMemory constructor joins the user id into self.user...

PT-2026-81330

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description In the serve subsystem, the praisonai serve agents and praisonai serve unified commands accept an --api-key flag for authentication, but the parsed value is not implemented within the FastAPI...

PT-2026-81328

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description An authentication bypass exists in the multi-agent teams system where the create agents app function fails to authenticate requests to the 'POST /agents' and 'POST /agents/agent name' endpoints...

PT-2026-81346

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The Recipe HTTP server in PraisonAI contains an authentication fail-open condition. When authentication is configured as api-key or jwt, the server silently allows unauthenticated requests if the...

PT-2026-81345

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description A Cross-Site Request Forgery CSRF issue exists in the MCP HTTP-stream transport. The validate origin function in transports/http stream.py uses a prefix match via startswith to validate the reques...

CVE-2026-55535: Time-of-check Time-of-use (TOCTOU) Race Condition

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validatewebhookurl path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhookurl can later resolve to 127.0.0.1, 169.254.169.254, or another internal address...

CVE-2026-55527: Improper Limitation of a Pathname to a Restricted Directory

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the FileMemory constructor joins unsanitized userid into self.userpath. A caller supplying ../ or path separators can escape the memory directory and write JSON data to arbitrary process-writable locations. The fix sanitize...

CVE-2026-55533: Improper Authentication

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, createauthmiddleware allows requests when auth=api-key lacks PRAISONAIAPIKEY or JWT authentication lacks PRAISONAIJWTSECRET. An externally bound Recipe server can therefore accept unauthenticated POST /v1/recipes/run requests...

PT-2026-81327

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description A Server-Side Request Forgery SSRF issue exists due to a Time-of-Check to Time-of-Use TOCTOU flaw and a fail-open DNS validation mechanism. The JobSubmitRequest.validate webhook url function...

PT-2026-81321

Name of the Vulnerable Software and Affected Versions praisonaiagents versions prior to 1.6.58 Description The ast grep rewrite function in the praisonaiagents/tools/ast grep tool.py component lacks the @require approval decorator used by other mutation tools. When the dry run variable is set to...

CVE-2026-55528: Missing Authentication for Critical Function

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.authtoken but AgentServer.createapp does not check it on any route. A remote caller can subscribe, publish, and perform other actions without a valid bearer token or X-Auth-Token even when...

CVE-2026-55536: Improper Access Control

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server handleconnection checks Chrome extension origins with re.match and the unanchored expression chrome-extension://a-z0-932. Extra trailing characters pass before websocket.accept, allowing startsession commands and...

PT-2026-81323

Name of the Vulnerable Software and Affected Versions PraisonAI versions 4.6.34 through 4.6.57 Description In the praisonai serve agents command, the system fails to enforce authentication on public agent invocation endpoints even when an API key is provided via the --api-key flag. The create...

PT-2026-81326

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The Jobs API contains a flaw where the validate webhook url function fails open when a socket.gaierror occurs during DNS resolution. This allows the webhook url parameter to bypass validation if t...

PT-2026-81322

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The MCP HTTP Stream mcp post handler fails to enforce a maximum number of sessions and does not invoke the cleanup sessions function to expire old entries. Consequently, every initialize request...

PT-2026-81348

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The Jobs API in PraisonAI lacks authentication middleware, router-level dependencies, and per-route authorization checks. This allows any caller who can reach the jobs server to submit agent jobs...

CVE-2026-55541: Missing Authorization

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve unified parse --api-key but createagentsapp and createunifiedapp do not install a credential check. Unauthenticated callers can reach POST /agents and POST /api/v1/agents/id/invoke. This...

CVE-2026-55531: Uncontrolled Resource Consumption

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream mcppost handler creates a new sessions entry for every initialize request but does not call cleanupsessions or enforce a maximum. An unauthenticated caller can exhaust memory. The fix invokes cleanup and limit...

PT-2026-81329

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description PraisonAI contains path traversal flaws in its praisonai.code tool wrappers, which are intended to treat the workspace setting as a security boundary. The boundary is enforced inconsistently and...