[ Vendor · 30 CVEs ]
MervinPraison
CVEs affecting MervinPraison published in the last 30 days, plus any MervinPraison CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-57143 | 12 Oct 2026 | CVSS 8.8 | MervinPraison praisonaiagentsPraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled… | |
| CVE-2026-57118 | 12 Oct 2026 | CVSS 9.8 | MervinPraison PraisonAIPraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /{path}/list, POST… | |
| CVE-2026-62176 | 7 Oct 2026 | CVSS 9.1 | PraisonAI: Code Injection via f-string Interpolation in Deploy API Server GenerationPraisonAI is a multi-agent teams system. Prior to version 4.6.78, the `deploy/api.py` module generates Python server code by directly interpolating… | Fix |
| CVE-2026-62179 | 7 Oct 2026 | CVSS 6.5 | PraisonAI: Platform members can delete owner issue dependencies through member-owned related issuesPraisonAI is a multi-agent teams system. In `praisonai-platform` prior to version 0.1.9, issue dependency deletion can be authorized against the… | Fix |
| CVE-2026-61446 | 15 Jul 2026 | CVSS 8.4 | PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without VerificationPraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary… | Fix |
| CVE-2026-61443 | 15 Jul 2026 | CVSS 8.1 | PraisonAI: SkillTools Executes Scripts Without Path Containment ValidationPraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that executes scripts without path… | Fix |
| CVE-2026-61440 | 15 Jul 2026 | CVSS 6.5 | PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorizationPraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared… | Fix |
| CVE-2026-61436 | 15 Jul 2026 | CVSS 8.6 | PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agentsPraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing unauthenticated attackers to forge… | Fix |
| CVE-2026-61435 | 15 Jul 2026 | CVSS 8.2 | PraisonAI: Call API localhost-only authentication bypass via spoofed Host headerPraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints (src/praisonai/praisonai/api/agent_invoke.py)… | Fix |
| CVE-2026-61430 | 15 Jul 2026 | CVSS 8.5 | PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosurePraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl tool that validates hostnames at check time but… | Fix |
| CVE-2026-61433 | 15 Jul 2026 | CVSS 7.8 | PraisonAI: API deploy code generator embeds unescaped YAML fields into Python sourcePraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can… | Fix |
| CVE-2026-61427 | 15 Jul 2026 | CVSS 7.3 | PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surfacePraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option defaults to None, and the… | Fix |
| CVE-2026-60085 | 15 Jul 2026 | CVSS 7.5 | PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backendPraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands… | Fix |
| CVE-2026-60087 | 15 Jul 2026 | CVSS 6.1 | PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary argumentsPraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial approvals for subsequent calls with… | Fix |
| CVE-2026-61447 | 11 Jul 2026 | CVSS 10.0 | PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment SecretsPraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without… | Fix |
| CVE-2026-61445 | 11 Jul 2026 | CVSS 9.9 | PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool CallsPraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation… | Fix |
| CVE-2026-61439 | 11 Jul 2026 | CVSS 7.5 | PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level ThreatsPraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity… | Fix |
| CVE-2026-61442 | 11 Jul 2026 | CVSS 7.1 | PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypassPraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for projects, issues, and agents… | Fix |
| CVE-2026-61429 | 11 Jul 2026 | CVSS 8.5 | PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypassPraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass… | Fix |
| CVE-2026-61426 | 11 Jul 2026 | CVSS 8.6 | PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosurePraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS… | Fix |
| CVE-2026-61428 | 11 Jul 2026 | CVSS 7.3 | PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofingPraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with… | Fix |
| CVE-2026-60090 | 11 Jul 2026 | CVSS 9.8 | PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDLPraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection()… | Fix |
| CVE-2026-60088 | 11 Jul 2026 | CVSS 5.5 | PraisonAI: Project custom command templates can read outside-workspace files into model promptsPraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace… | Fix |
| CVE-2026-61437 | 10 Jul 2026 | CVSS 7.8 | PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlowPraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow._resolve_pydantic_class… | Fix |
| CVE-2026-61434 | 10 Jul 2026 | CVSS 8.8 | PraisonAI: Shell command allowlist bypass via find -exec built-in actionPraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that allows attackers to execute restricted… | Fix |
| CVE-2026-61431 | 10 Jul 2026 | CVSS 5.5 | PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspacePraisonAI before 4.6.78 contains a path traversal vulnerability in ContextGatherer that fails to validate include paths in .praisoncontext and… | Fix |
| CVE-2026-61432 | 10 Jul 2026 | CVSS 5.7 | PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspacePraisonAI (praisonaiagents) before 1.6.78 contains a path traversal vulnerability in the FastContext feature (praisonaiagents.context.fast)… | Fix |
| CVE-2026-60091 | 10 Jul 2026 | CVSS 7.2 | PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRFPraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the Jobs API /api/v1/runs endpoint. The webhook_url… | Fix |
| CVE-2026-60086 | 10 Jul 2026 | CVSS 5.3 | PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblockedPraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as… | Fix |
| CVE-2026-60089 | 10 Jul 2026 | CVSS 5.5 | PraisonAI: Project config can auto-save agent output outside the project rootPraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .praisonai/config.toml when constructing an… | Fix |