CVE-2026-57130

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:17+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c969-5x3p-vq3v 2026-09-14 16:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvii7bt4nn2z 2026-09-14...

CVE-2026-57131

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:15+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fq2m-6wqh-x44g 2026-07-23 17:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcrzmdqs2q 2026-09-14...

CVE-2026-57132

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:13+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8ccj-p46r-jwqq...

CVE-2026-57135

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:08+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rrpf...

CVE-2026-57137

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:04+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h2w2-v7j6-xqm4...

CVE-2026-57140

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:59+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9752-mhqh-h34f 2026-09-15 12:08:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvklolpyvl2j 2026-09-15...

CVE-2026-57139

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:57+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4f3-55x4-r6q2 2026-09-15 12:08:29+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvklodner42t 2026-09-15...

CVE-2026-57142

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:51+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7qw2-w5rc-37x2...

CVE-2026-57147

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:44+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cwj8-7gp2-ggcw 2026-07-23 17:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz77dbd2q 2026-09-15...

Command Injection

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

Arbitrary Code Injection

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

Improper Authentication

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

Missing Authorization

Overview praisonai-platform is a Platform layer for PraisonAI — workspace, auth, issues, projects Affected versions of this package are vulnerable to Missing Authorization via the label and issue-label mutation endpoints. An attacker can modify shared label names and colors, as well as add or...

Improper Check for Dropped Privileges

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

Duplicate Advisory: PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xxgv-vgvj-qvxh. This link is maintained to preserve external references. Original Description PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace membe...

Duplicate Advisory: PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5r6c-gj4g-r697. This link is maintained to preserve external references. Original Description PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backen...

Duplicate Advisory: PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7c92-x8vg-4258. This link is maintained to preserve external references. Original Description PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing unauthenticated...

Duplicate Advisory: PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-79fv-7hq9-w7xg. This link is maintained to preserve external references. Original Description PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for...

Duplicate Advisory: PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2gpf-2492-q9jh. This link is maintained to preserve external references. Original Description PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints...

Duplicate Advisory: PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hc5v-gxvj-58wh. This link is maintained to preserve external references. Original Description PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key...