PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation

AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation SummaryPraisonAI's AgentOS FastAPI deployment surface remains unauthenticated incurrent main and in releases after the published patched version forGHSA-pm96-6xpr-978x / CVE-2026-40151.The public...

5gasp-cli (>=0.1.0, <=0.4.0), agentos (>=0.1.0, <=0.2.0) +566 more potentially affected by CVE-2026-38974 via dulwich (>=0.16.3, <=1.1.0)

dulwich PYPI version =0.16.3, =0.1.0, =0.1.0, =0.5.1, =21.7.1, =0.1.0, =0.1.0, =1.3.4, =2023.2.21, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.5.1 and more Source cves: CVE-2026-38974 Source advisory: MEND:CVE-2026-38974...

5gasp-cli (>=0.1.0, <=0.4.0), agentos (>=0.1.0, <=0.2.0) +570 more potentially affected by CVE-2026-47734 via dulwich (>=0.16.3, <=1.2.1)

dulwich PYPI version =0.16.3, =0.1.0, =0.1.0, =0.5.1, =21.7.1, =0.1.0, =0.1.0, =1.3.4, =2023.2.21, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.5.1 and more Source cves: CVE-2026-47734 Source advisory: OSV:PYSEC-2026-2466...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-3198 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-3198 Source advisory: OSV:PYSEC-2026-2659...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-4137 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-4137 Source advisory: OSV:PYSEC-2026-2655...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-2734 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-2614 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-15381 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-15031 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-15031 Source advisory: OSV:PYSEC-2026-2656...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-14287 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-14287 Source advisory: OSV:PYSEC-2026-2661...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-2033 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-2033 Source advisory: OSV:PYSEC-2026-2658...

Duplicate Advisory: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6wjp-v33h-5cvq. This link is maintained to preserve external references. Original Description PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key...

GHSA-G3PQ-3VVX-36W6 Duplicate Advisory: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6wjp-v33h-5cvq. This link is maintained to preserve external references. Original Description PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-10279 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-14279 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-14279 Source advisory: OSV:PYSEC-2026-1656...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-11201 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-11201 Source advisory: OSV:PYSEC-2026-1640...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-11200 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-11200 Source advisory: OSV:PYSEC-2026-1642...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-0453 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-0453 Source advisory: OSV:PYSEC-2026-1637...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2024-8859 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2024-8859 Source advisory: OSV:PYSEC-2026-1638...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2024-6838 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2024-6838 Source advisory: OSV:PYSEC-2026-1658...