Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/04/14 3:0 a.m.32 views

CVE-2026-40288 PraisonAI: Critical RCE via `type: job` workflow YAML

PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the workflow engine is vulnerable to arbitrary command and code execution through untrusted YAML files. When praisonai workflow run loads a YAML file with type: job, the...

9.8CVSS0.00609EPSS
SaveExploits1References1
Rows per page
Query Builder