CVE-2026-57127

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:24+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4hj-7hfh-g2f4 2026-07-23 16:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcoi3qaq2u 2026-09-14...

CVE-2026-57128

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:22+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-35w5-pcw4-jx94...

CVE-2026-57130

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:17+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c969-5x3p-vq3v 2026-09-14 16:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvii7bt4nn2z 2026-09-14...

CVE-2026-57131

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:15+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fq2m-6wqh-x44g 2026-07-23 17:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcrzmdqs2q 2026-09-14...

CVE-2026-57132

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:13+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8ccj-p46r-jwqq...

CVE-2026-57135

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:08+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rrpf...

CVE-2026-57137

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:04+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h2w2-v7j6-xqm4...

CVE-2026-57140

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:59+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9752-mhqh-h34f 2026-09-15 12:08:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvklolpyvl2j 2026-09-15...

CVE-2026-57139

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:57+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4f3-55x4-r6q2 2026-09-15 12:08:29+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvklodner42t 2026-09-15...

CVE-2026-57142

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:51+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7qw2-w5rc-37x2 2026-10-23 12:37:35+00:00| seen| https://infosec.exchange/users/cve/statuses/117490257432637967...

CVE-2026-57147

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:44+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cwj8-7gp2-ggcw 2026-07-23 17:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz77dbd2q 2026-09-15...

Command Injection

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

Arbitrary Code Injection

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

Improper Authentication

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

Missing Authorization

Overview praisonai-platform is a Platform layer for PraisonAI — workspace, auth, issues, projects Affected versions of this package are vulnerable to Missing Authorization via the label and issue-label mutation endpoints. An attacker can modify shared label names and colors, as well as add or...

Improper Check for Dropped Privileges

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

GHSA-Q359-RMV4-56FG Duplicate Advisory: PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m6wp-h223-4c8g. This link is maintained to preserve external references. Original Description PraisonAI praisonaiagents before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which...

GHSA-F352-4X87-WMJH Duplicate Advisory: PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-c44f-37qr-gw3f. This link is maintained to preserve external references. Original Description PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.runskillscript that executes...

Duplicate Advisory: PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m6wp-h223-4c8g. This link is maintained to preserve external references. Original Description PraisonAI praisonaiagents before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which...

Duplicate Advisory: PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xxgv-vgvj-qvxh. This link is maintained to preserve external references. Original Description PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace membe...