CVE-2026-57127

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:24+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4hj-7hfh-g2f4 2026-07-23 16:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcoi3qaq2u...

CVE-2026-57128

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:22+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-35w5-pcw4-jx94...

CVE-2026-57130

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:17+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c969-5x3p-vq3v...

CVE-2026-57131

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:15+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fq2m-6wqh-x44g 2026-07-23 17:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcrzmdqs2q...

CVE-2026-57132

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:13+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8ccj-p46r-jwqq...

CVE-2026-57135

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:08+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rrpf...

CVE-2026-57137

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:04+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h2w2-v7j6-xqm4...

CVE-2026-57140

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:59+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9752-mhqh-h34f...

CVE-2026-57139

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:57+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4f3-55x4-r6q2...

CVE-2026-57142

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:51+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7qw2-w5rc-37x2...

CVE-2026-57147

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:44+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cwj8-7gp2-ggcw 2026-07-23 17:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz77dbd2q...

Command Injection

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

Missing Authorization

Overview praisonai-platform is a Platform layer for PraisonAI — workspace, auth, issues, projects Affected versions of this package are vulnerable to Missing Authorization via the label and issue-label mutation endpoints. An attacker can modify shared label names and colors, as well as add or...

CVE-2026-61443

PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.runskillscript that executes scripts without path containment validation. Attackers can supply absolute file paths to execute arbitrary scripts from any filesystem location, including those outside the intended...

CVE-2026-61440

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to...

CVE-2026-61427

PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option defaults to None, and the server only enforces Authorization/Bearer checks when an API key is configured. When an operator runs 'praisonai mcp serve --transport http-stream'...

CVE-2026-61430

PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the webcrawl tool that validates hostnames at check time but re-resolves them at connection time without IP pinning. Attackers can use DNS rebinding to bypass SSRF protection and retrieve internal HTTP response bodies...

CVE-2026-61435

PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints src/praisonai/praisonai/api/agentinvoke.py when PRAISONAICALLAUTH=disabled is configured. The safeguard intended to restrict the disabled-auth opt-out to localhost binding derives the bind host fr...

CVE-2026-60085

PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blockedcommands, blockedpaths, blockedimports, allowsubprocess, and allowfilewrite restrictions are completely ignored. Attackers can execute arbitrary subprocess commands,...

CVE-2026-61446

CVE-2026-61446 affects PraisonAI before 1.6.78. The plugin manager loads and executes arbitrary Python files from plugin directories using importlib and exec_module without code signing or sandboxing, enabling a local attacker who can write a malicious .py file to achieve arbitrary code execution...