Lucene search
+L

9 matches found

NVD
NVD
added 2026/08/25 4:16 p.m.6 views

CVE-2026-55533

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, createauthmiddleware allows requests when auth=api-key lacks PRAISONAIAPIKEY or JWT authentication lacks PRAISONAIJWTSECRET. An externally bound Recipe server can therefore accept unauthenticated POST /v1/recipes/run requests...

8.2CVSS0.00337EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/05 7:01 p.m.71 views

CVE-2026-55522

CVE-2026-55522 – PraisonAI workflow include bypasses tools.py autoload . Affected: PraisonAI versions 3.9.26–4.6.57 and PraisonAIAgents 0.12.12–1.6.57. The workflow include feature (Workflow._execute_include) imports and executes a recipe’s tools.py via importlib.util.spec_from_file_location() an...

7.8CVSS6.2AI score0.00152EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/06/18 1:56 p.m.19 views

Insecure Default Initialization of Resource

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

9.8CVSS6.5AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/05/08 1:25 p.m.43 views

CVE-2026-44334 PraisonAI: Unauthenticated RCE via `tool_override.py`

PraisonAI is a multi-agent teams system. From version 4.5.139 to before version 4.6.32, CVE-2026-40287's fix gated tools.py auto-import behind PRAISONAIALLOWLOCALTOOLS=true in two files toolresolver.py, api/call.py. A third import sink in praisonai/templates/tooloverride.py was missed and remains...

8.4CVSS0.00246EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2024/06/04 12:00 a.m.8 views

PT-2024-27276

Name of the Vulnerable Software and Affected Versions MLflow platform versions 1.27.0 and newer Description The issue allows deserialization of untrusted data, enabling a maliciously crafted Recipe to execute arbitrary code on an end user’s system when run. Recommendations For MLflow platform...

8.8CVSS6.4AI score0.00775EPSS
SaveExploits1References12
OpenVAS
OpenVAS
added 2010/03/22 12:00 a.m.34 views

Fedora Update for esorex FEDORA-2010-3216

Check for the Version of esorex OpenVAS Vulnerability Test Fedora Update for esorex FEDORA-2010-3216 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

6.9CVSS0.8AI score0.00394EPSS
SaveExploits1References2
Fedora
Fedora
added 2010/03/20 3:51 a.m.50 views

[SECURITY] Fedora 11 Update: esorex-3.7.2-3.fc11

EsoRex is the ESO Recipe Execution Tool. It can list, configure and execute CPL-based recipes from the command line. One of the features provided by the CPL is the ability to create data-reduction algorithms that run as plugins dynamic libraries. These are called recipes and are one of the main...

6.9CVSS2.6AI score0.00394EPSS
SaveExploits1
Fedora
Fedora
added 2010/03/20 3:29 a.m.45 views

[SECURITY] Fedora 12 Update: esorex-3.7.2-5.fc12

EsoRex is the ESO Recipe Execution Tool. It can list, configure and execute CPL-based recipes from the command line. One of the features provided by the CPL is the ability to create data-reduction algorithms that run as plugins dynamic libraries. These are called recipes and are one of the main...

6.9CVSS2.6AI score0.00394EPSS
SaveExploits1
Fedora
Fedora
added 2010/03/10 6:54 a.m.36 views

[SECURITY] Fedora 13 Update: esorex-3.7.2-6.fc13

EsoRex is the ESO Recipe Execution Tool. It can list, configure and execute CPL-based recipes from the command line. One of the features provided by the CPL is the ability to create data-reduction algorithms that run as plugins dynamic libraries. These are called recipes and are one of the main...

6.9CVSS2.6AI score0.00394EPSS
SaveExploits1
Rows per page
Query Builder