1789 matches found
CVE-2026-40088
PraisonAI is a multi-agent teams system. Prior to 4.5.121, the executecommand function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell...
EUVD-2026-21064
PraisonAI is a multi-agent teams system. Prior to 4.5.121, the executecommand function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell...
CVE-2026-40088
PraisonAI is a multi-agent teams system. Prior to 4.5.121, the executecommand function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell...
CVE-2026-40088
PraxionAI (PraisonAI) is vulnerable to OS command injection prior to version 4.5.121. The execute_command function and workflow shell execution accept user-controlled input through YAML workflows, agent configurations, and LLM-generated tool calls, passing commands with shell=True to subprocess.r...
CVE-2026-40088: Improper Neutralization of Special Elements used in an OS Command
PraisonAI is a multi-agent teams system. Prior to 4.5.121, the executecommand function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell...
Command Injection
Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...
CVE-2026-33458 Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure
Server-Side Request Forgery CWE-918 in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data...
CVE-2026-33458 Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure
Server-Side Request Forgery CWE-918 in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data...
Kibana 9.3.3 Security Update (ESA-2026-28)
Server-Side Request Forgery SSRF in Kibana One Workflow Leading to Information Disclosure Server-Side Request Forgery CWE-918 in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in...
Emissary has GitHub Actions Shell Injection via Workflow Inputs
Summary Three GitHub Actions workflow files contained 10 shell injection points where user-controlled workflowdispatch inputs were interpolated directly into shell commands via $ expression syntax. An attacker with repository write access could inject arbitrary shell commands, leading to reposito...
CVE-2026-33458: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery CWE-918 in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data...
Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps
Your attack surface no longer lives on one operating system, and neither do the campaigns targeting it. In enterprise environments, attackers move across Windows endpoints, executive MacBooks, Linux infrastructure, and mobile devices, taking advantage of the fact that many SOC workflows are still...
PT-2026-32614
Summary External input from github.event.issue.title is used unsafely in a shell command in .github/workflows/release-candidate.yaml, allowing command injection during workflow execution. Details In .github/workflows/release-candidate.yaml, the issue title is interpolated directly into a shell...
CVE-2026-2950 vulnerabilities
Vulnerabilities for packages: npm, jupyter-base-notebook, saf, langfuse-fips, code-server, jitsucom-jitsu, librechat, foxx-cli, arangodb, argo-workflows, pelias-api, opensearch-dashboards-fips, langfuse, renovate, vitess, gitlab-rails-ce-fips, sqlpad, kubeflow-pipelines, opensearch-dashboards,...
GHSA-F23M-R3PF-42RH vulnerabilities
Vulnerabilities for packages: npm, jupyter-base-notebook, saf, langfuse-fips, code-server, jitsucom-jitsu, librechat, foxx-cli, arangodb, argo-workflows, pelias-api, opensearch-dashboards-fips, langfuse, renovate, vitess, gitlab-rails-ce-fips, sqlpad, kubeflow-pipelines, opensearch-dashboards,...
CVE-2026-4800 vulnerabilities
Vulnerabilities for packages: npm, jupyter-base-notebook, saf, langfuse-fips, code-server, jitsucom-jitsu, librechat, foxx-cli, arangodb, argo-workflows, pelias-api, opensearch-dashboards-fips, langfuse, renovate, vitess, gitlab-rails-ce-fips, sqlpad, kubeflow-pipelines, opensearch-dashboards,...
GHSA-R5FR-RJXR-66JC vulnerabilities
Vulnerabilities for packages: npm, jupyter-base-notebook, saf, langfuse-fips, code-server, jitsucom-jitsu, librechat, foxx-cli, arangodb, argo-workflows, pelias-api, opensearch-dashboards-fips, langfuse, renovate, vitess, gitlab-rails-ce-fips, sqlpad, kubeflow-pipelines, opensearch-dashboards,...
CVE-2026-5199
A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the attacker to know or guess specific victim workflow IDs and, for signal operations, signal names. This was due to a bu...
GHSA-F23M-R3PF-42RH vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, json-server, npm, jitsucom-jitsu, prism, py3-jupyterlab, argo-workflows, saf, sqlpad, langfuse, ts-patch, opensearch-dashboards, code-server, kubeflow-pipelines, kubeflow-katib, vitess, renovate, kubeflow-centraldashboard...
CVE-2026-4800 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, json-server, npm, jitsucom-jitsu, prism, py3-jupyterlab, argo-workflows, saf, sqlpad, langfuse, ts-patch, opensearch-dashboards, code-server, kubeflow-pipelines, kubeflow-katib, vitess, renovate, kubeflow-centraldashboard...