9 matches found
CVE-2026-55533
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, createauthmiddleware allows requests when auth=api-key lacks PRAISONAIAPIKEY or JWT authentication lacks PRAISONAIJWTSECRET. An externally bound Recipe server can therefore accept unauthenticated POST /v1/recipes/run requests...
CVE-2026-55522
CVE-2026-55522 – PraisonAI workflow include bypasses tools.py autoload . Affected: PraisonAI versions 3.9.26–4.6.57 and PraisonAIAgents 0.12.12–1.6.57. The workflow include feature (Workflow._execute_include) imports and executes a recipe’s tools.py via importlib.util.spec_from_file_location() an...
Insecure Default Initialization of Resource
Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...
CVE-2026-44334 PraisonAI: Unauthenticated RCE via `tool_override.py`
PraisonAI is a multi-agent teams system. From version 4.5.139 to before version 4.6.32, CVE-2026-40287's fix gated tools.py auto-import behind PRAISONAIALLOWLOCALTOOLS=true in two files toolresolver.py, api/call.py. A third import sink in praisonai/templates/tooloverride.py was missed and remains...
PT-2024-27276
Name of the Vulnerable Software and Affected Versions MLflow platform versions 1.27.0 and newer Description The issue allows deserialization of untrusted data, enabling a maliciously crafted Recipe to execute arbitrary code on an end user’s system when run. Recommendations For MLflow platform...
Fedora Update for esorex FEDORA-2010-3216
Check for the Version of esorex OpenVAS Vulnerability Test Fedora Update for esorex FEDORA-2010-3216 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
[SECURITY] Fedora 11 Update: esorex-3.7.2-3.fc11
EsoRex is the ESO Recipe Execution Tool. It can list, configure and execute CPL-based recipes from the command line. One of the features provided by the CPL is the ability to create data-reduction algorithms that run as plugins dynamic libraries. These are called recipes and are one of the main...
[SECURITY] Fedora 12 Update: esorex-3.7.2-5.fc12
EsoRex is the ESO Recipe Execution Tool. It can list, configure and execute CPL-based recipes from the command line. One of the features provided by the CPL is the ability to create data-reduction algorithms that run as plugins dynamic libraries. These are called recipes and are one of the main...
[SECURITY] Fedora 13 Update: esorex-3.7.2-6.fc13
EsoRex is the ESO Recipe Execution Tool. It can list, configure and execute CPL-based recipes from the command line. One of the features provided by the CPL is the ability to create data-reduction algorithms that run as plugins dynamic libraries. These are called recipes and are one of the main...