Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

6 matches found

OSV
OSV•added 2026/07/13 3:02 p.m.•13 views

PYSEC-2026-2914 PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAI automatically imports ./tools.py from the current working directory when launching certain components. This includes call.py, toolresolver.py, and CLI tool-loading paths. A malicious tools.py placed in the process working directory is executed immediately, allowing arbitrary Python code...

8.4CVSS6.5AI score0.00231EPSS
SaveExploits1References6
OSV
OSV•added 2026/07/13 3:02 p.m.•14 views

PYSEC-2026-2947 PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAI automatically imports ./tools.py from the current working directory when launching certain components. This includes call.py, toolresolver.py, and CLI tool-loading paths. A malicious tools.py placed in the process working directory is executed immediately, allowing arbitrary Python code...

8.4CVSS6.5AI score0.00231EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies•added 2026/07/13 12:00 a.m.•29 views

PT-2026-59548

PraisonAI automatically imports ./tools.py from the current working directory when launching certain components. This includes call.py, tool resolver.py, and CLI tool-loading paths. A malicious tools.py placed in the process working directory is executed immediately, allowing arbitrary Python cod...

8.4CVSS6.5AI score0.00231EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies•added 2026/07/13 12:00 a.m.•19 views

PT-2026-59579

PraisonAI automatically imports ./tools.py from the current working directory when launching certain components. This includes call.py, tool resolver.py, and CLI tool-loading paths. A malicious tools.py placed in the process working directory is executed immediately, allowing arbitrary Python cod...

8.4CVSS6.5AI score0.00231EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE•added 2026/06/05 7:14 p.m.•13 views

CVE-2026-40287

PraisonAI is a multi-agent teams system. Versions 4.5.138 and below are vulnerable to arbitrary code execution through automatic, unsanitized import of a tools.py file from the current working directory. Components including call.py importtoolsfromfile, toolresolver.py loadlocaltools, and CLI...

8.4CVSS6.1AI score0.00231EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog•added 2026/04/10 7:32 p.m.•18 views

PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAI automatically imports ./tools.py from the current working directory when launching certain components. This includes call.py, toolresolver.py, and CLI tool-loading paths. A malicious tools.py placed in the process working directory is executed immediately, allowing arbitrary Python code...

8.4CVSS6.4AI score0.00231EPSS
SaveExploits1References4Affected Software2
Rows per page
Query Builder