What’s Vulnerable › Products
MervinPraison PraisonAI vulnerabilities
144 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 144 published in the last 12 months.
Check whether your MervinPraison PraisonAI version is affected
Latest MervinPraison PraisonAI vulnerabilities
- CVE-2026-56837 — PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing (CVSS 8.6)
- CVE-2026-56833 — PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal (CVSS 7.5)
- CVE-2026-57117 — PraisonAI: Compute-bridged file tools allow shell command injection (CVSS 8.8)
- CVE-2026-57146 — PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default (CVSS 7.5)
- CVE-2026-57144 — PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable (CVSS 8.8)
- CVE-2026-57142 — PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml (CVSS 7.8)
- CVE-2026-57121 — PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API (CVSS 8.1)
- CVE-2026-57116 — PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation (CVSS 9.8)
- CVE-2026-57114 — PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding (CVSS 7.2)
- CVE-2026-57113 — PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion (CVSS 8.1)
- CVE-2026-56840 — PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools (CVSS 8.8)
- CVE-2026-56838 — PraisonAI recipe.run_stream skips dangerous-tool policy enforcement (CVSS 7.8)
- CVE-2026-56836 — PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard (CVSS 8.2)
- CVE-2026-56835 — PraisonAI Slack app_mention bypasses configured user/channel authorization (CVSS 8.3)
- CVE-2026-56834 — PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage (CVSS 7.5)
- CVE-2026-56832 — PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals (CVSS 8.8)
- CVE-2026-57118 — PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints (CVSS 9.8)
- CVE-2026-62176 — PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation (CVSS 9.1)
- CVE-2026-57148 — praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard) (CVSS 9.8)
- CVE-2026-57147 — praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery (CVSS 9.8)
- CVE-2026-57141 — PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool (CVSS 9.8)
- CVE-2026-57140 — PraisonAI AgentOS exposes unauthenticated agent listing and invocation (CVSS 9.4)
- CVE-2026-57139 — PraisonAI MCPServer exposes unauthenticated HTTP tools/call (CVSS 9.8)
- CVE-2026-57138 — PraisonAI codeMode sandbox escape via Function constructor (CVSS 9.9)
- CVE-2026-57137 — PraisonAI AgentLoop onToolCall approval runs after tool execution (CVSS 8.8)