What’s Vulnerable › Products
MervinPraison praisonaiagents vulnerabilities
31 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 31 published in the last 12 months.
Check whether your MervinPraison praisonaiagents version is affected
Latest MervinPraison praisonaiagents vulnerabilities
- CVE-2026-57143 — PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter (CVSS 8.8)
- CVE-2026-57118 — PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints (CVSS 9.8)
- CVE-2026-57112 — PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools (CVSS 8.3)
- CVE-2026-57130 — PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters (CVSS 8.1)
- CVE-2026-57129 — PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal (CVSS 7.5)
- CVE-2026-57125 — PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass (CVSS 9.8)
- CVE-2026-57123 — PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in (CVSS 9.8)
- CVE-2026-57120 — PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder (CVSS 6.5)
- CVE-2026-57115 — PraisonAI: SpiderTools redirect-target SSRF protection bypass (CVSS 6.5)
- CVE-2026-55530 — PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool (CVSS 6.1)
- CVE-2026-55528 — praisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862) (CVSS 8.2)
- CVE-2026-55526 — PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`) (CVSS 8.5)
- CVE-2026-55525 — PraisonAI: SSRF via redirect-following in praisonaiagents web_crawl (CVSS 7.5)
- CVE-2026-55522 — PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code (CVSS 7.8)
- CVE-2026-47395 — PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context (CVSS 5.5)
- CVE-2026-47390 — PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings (CVSS 5.5)
- CVE-2026-44339 — PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute (CVSS 8.6)
- CVE-2026-44335 — SSRF bypass in PraisonAI (CVSS 9.8)
- CVE-2026-41496 — PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315) (CVSS 8.1)
- CVE-2026-40289 — PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions (CVSS 9.1)
- CVE-2026-40288 — PraisonAI: Critical RCE via `type: job` workflow YAML (CVSS 9.8)
- CVE-2026-40287 — PraisonAI has RCE via Automatic tools.py Import (CVSS 8.4)
- CVE-2026-40160 — PraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallback (CVSS 6.5)
- CVE-2026-40153 — PraisonAIAgents Affected by Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool (CVSS 6.5)
- CVE-2026-40152 — PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary (CVSS 5.3)