CVE Tools
Track your stack

Praisonai

196 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Praisonai, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Praisonai CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Praisonai CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-0446
2026-059
2026-0639
2026-0739
2026-0821
2026-0924
2026-1018
2026-110

Severity

How the 196 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical4127%
  • High8355%
  • Medium2617%

Latest CVEs

The 15 most recently published vulnerabilities affecting Praisonai.

  1. CVE-2026-57117PraisonAI: Compute-bridged file tools allow shell command injection8.8
  2. CVE-2026-57146PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default7.5
  3. CVE-2026-57144PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable8.8
  4. CVE-2026-57142PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml7.8
  5. CVE-2026-57121PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API8.1
  6. CVE-2026-57116PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation9.8
  7. CVE-2026-57114PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding7.2
  8. CVE-2026-57113PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion8.1
  9. CVE-2026-56840PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools8.8
  10. CVE-2026-56838PraisonAI recipe.run_stream skips dangerous-tool policy enforcement7.8
  11. CVE-2026-56837PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing8.6
  12. CVE-2026-56836PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard8.2
  13. CVE-2026-56835PraisonAI Slack app_mention bypasses configured user/channel authorization8.3
  14. CVE-2026-56834PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage7.5
  15. CVE-2026-56833PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal7.5

Product grouping is registry-driven, with AI assist and human review. How it works