Praisonai

This hub aggregates every CVE we track for Praisonai, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Praisonai.

• CVE-2026-55524PraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)7.5Aug 5, 2026
• CVE-2026-55522PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code7.8Aug 5, 2026
• CVE-2026-48168PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch name10.0Aug 5, 2026
• CVE-2026-47398PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-443348.1Jul 21, 2026
• CVE-2026-47396PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset9.8Jul 21, 2026
• CVE-2026-47395PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context5.5Jul 21, 2026
• CVE-2026-47393PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default9.8Jul 21, 2026
• CVE-2026-47392PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)9.9Jul 21, 2026
• CVE-2026-47391PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution9.8Jul 21, 2026
• CVE-2026-47390PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings5.5Jul 21, 2026
• CVE-2026-61446PraisonAI before 1.6.78 Remote Code Execution via Plugin Auto-Discovery8.4Jul 15, 2026
• CVE-2026-61443PraisonAI before 1.6.78 Remote Code Execution via SkillTools8.1Jul 15, 2026
• CVE-2026-61440PraisonAI Platform before 0.1.9 Authorization Bypass via Label Endpoints6.5Jul 15, 2026
• CVE-2026-61438PraisonAI before 4.6.78 Remote Code Execution via Broken AST Sandbox7.3Jul 15, 2026
• CVE-2026-61436PraisonAI before 4.6.78 Missing Webhook Signature Verification8.6Jul 15, 2026