CVEs we hold for Mervinpraison
Records whose assigning authority named Mervinpraison as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-61446PraisonAI before 1.6.78 Remote Code Execution via Plugin Auto-DiscoveryMervinPraison PraisonAI
CVE-2026-61445PraisonAI before 4.6.78 Arbitrary File Write and Command ExecutionMervinPraison PraisonAI
CVE-2026-61441PraisonAI Platform before 0.1.9 Authorization Bypass via DependenciesMervinPraison PraisonAI
CVE-2026-61440PraisonAI Platform before 0.1.9 Authorization Bypass via Label EndpointsMervinPraison PraisonAI
CVE-2026-61438PraisonAI before 4.6.78 Remote Code Execution via Broken AST SandboxMervinPraison PraisonAI
CVE-2026-61435PraisonAI before 4.6.78 Authentication Bypass via Host Header SpoofingMervinPraison PraisonAI
CVE-2026-61433PraisonAI before 4.6.78 Code Injection via API deployment generatorMervinPraison PraisonAI
CVE-2026-61428PraisonAI AgentMail before 4.6.78 Message Injection via WebhookMervinPraison PraisonAI
CVE-2026-61426PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure DefaultsMervinPraison PraisonAI
CVE-2026-60085PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess SandboxMervinPraison PraisonAI
CVE-2026-57148praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)MervinPraison praisonai-platform
CVE-2026-57147praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgeryMervinPraison praisonai-platform
CVE-2026-57145PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path ValidationMervinPraison PraisonAI
CVE-2026-57141PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` ToolMervinPraison PraisonAI
CVE-2026-57140PraisonAI AgentOS exposes unauthenticated agent listing and invocationMervinPraison PraisonAI
CVE-2026-57137PraisonAI AgentLoop onToolCall approval runs after tool executionMervinPraison PraisonAI
CVE-2026-57136PraisonAI SandboxExecutor allowedCommands bypass via shell chainingMervinPraison PraisonAI
CVE-2026-57135PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsMervinPraison PraisonAI
CVE-2026-57134PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validationMervinPraison PraisonAI
CVE-2026-57133PraisonAI utility shell safe-command wrapper allowlist bypass via shell chainingMervinPraison PraisonAI
CVE-2026-57132PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authenticationMervinPraison PraisonAI
CVE-2026-57131praisonai: Jobs API exposes agent-execution endpoints with no authenticationMervinPraison PraisonAI
CVE-2026-57130PraisonAI: IMAP Command Injection via Unsanitized Email Search ParametersMervinPraison praisonaiagents
CVE-2026-57129PraisonAI: Arbitrary File Read via `@file:` Mention Path TraversalMervinPraison praisonaiagents
CVE-2026-57128PraisonAI: Unauthenticated Event Injection via SSE `/publish` EndpointMervinPraison PraisonAI
CVE-2026-57127praisonai: recipe serve auth middleware silently disables itself when no secret is setMervinPraison PraisonAI
CVE-2026-57126praisonaiagents: SSRF guard validates literal IPs only and never resolves DNSMervinPraison PraisonAI
CVE-2026-57125PraisonAI: Unauthenticated RCE via Jobs API + Approval BypassMervinPraison praisonaiagents
CVE-2026-57124PraisonAI UI MCP connect endpoint allows unauthenticated local command executionMervinPraison PraisonAI
CVE-2026-57123PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation…MervinPraison praisonaiagents
CVE-2026-57122PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks…MervinPraison PraisonAI
CVE-2026-57120PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunderMervinPraison praisonaiagents
CVE-2026-57119PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs APIMervinPraison PraisonAI
CVE-2026-57115PraisonAI: SpiderTools redirect-target SSRF protection bypassMervinPraison praisonaiagents
CVE-2026-57112PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsMervinPraison praisonaiagents
CVE-2026-56839PraisonAI Code agent tools fail open without a workspace boundaryMervinPraison PraisonAI
CVE-2026-55541PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforcedMervinPraison PraisonAI
CVE-2026-55540PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinksMervinPraison PraisonAI
CVE-2026-55539PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job…MervinPraison PraisonAI
CVE-2026-55538PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST…MervinPraison PraisonAI
CVE-2026-55537PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114MervinPraison PraisonAI
CVE-2026-55536Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 /…MervinPraison PraisonAI
CVE-2026-55535PraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook_url validationMervinPraison PraisonAI
CVE-2026-55534PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent executionMervinPraison PraisonAI
CVE-2026-55533PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is…MervinPraison PraisonAI
CVE-2026-55532PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery…MervinPraison PraisonAI
CVE-2026-55531PraisonAI: Unauthenticated unbounded session accumulation in the PraisonAI MCP HTTP server (memory exhaustion…MervinPraison PraisonAI
CVE-2026-55530PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling…MervinPraison praisonaiagents
CVE-2026-55529PraisonAI: Origin validation bypass in MCP HTTP Stream transport allows browser-mediated unauthenticated tool execution…MervinPraison PraisonAI
CVE-2026-55528praisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862)MervinPraison praisonaiagents
CVE-2026-55527PraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable…MervinPraison PraisonAI
CVE-2026-55526PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)MervinPraison praisonaiagents
CVE-2026-55525PraisonAI: SSRF via redirect-following in praisonaiagents web_crawlMervinPraison praisonaiagents
CVE-2026-55524PraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)MervinPraison PraisonAI
CVE-2026-55523PraisonAI has a`web_crawl` SSRF protection bypass via unchecked redirect targetsMervinPraison PraisonAI
CVE-2026-55522PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe codeMervinPraison praisonaiagents
CVE-2026-48169PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform APIMervinPraison praisonai-platform
CVE-2026-48168PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch nameMervinPraison PraisonAI
CVE-2026-47419praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace…MervinPraison praisonai-platform
CVE-2026-47418praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace…MervinPraison praisonai-platform
CVE-2026-47417praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment…MervinPraison praisonai-platform
CVE-2026-47416praisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH…MervinPraison praisonai-platform
CVE-2026-47415praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace…MervinPraison praisonai-platform
CVE-2026-47414praisonai-platform: Label endpoints accept any label_id and any issue_id without workspace ownership check…MervinPraison praisonai-platform
CVE-2026-47413praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/membersMervinPraison praisonai-platform
CVE-2026-47412praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}MervinPraison praisonai-platform
CVE-2026-47411praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH…MervinPraison praisonai-platform
CVE-2026-47410praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user…MervinPraison praisonai-platform
CVE-2026-47409praisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE…MervinPraison praisonai-platform
CVE-2026-47408praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownershipMervinPraison praisonai-platform
CVE-2026-47407PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalationMervinPraison praisonai-platform
CVE-2026-47406praisonai-platform: Dependency endpoints accept any issue_id and dep_id without workspace ownership check…MervinPraison praisonai-platform
CVE-2026-47405PraisonAI Platform missing role checks let any workspace member become owner and take over workspace membershipMervinPraison praisonai-platform
CVE-2026-47399PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object IDMervinPraison praisonai-platform
CVE-2026-47398PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of…MervinPraison PraisonAI
CVE-2026-47396PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unsetMervinPraison PraisonAI
CVE-2026-47395PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model contextMervinPraison praisonaiagents
CVE-2026-47394PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validateMervinPraison PraisonAI
CVE-2026-47393PraisonAI `deploy --type api` emits a Flask server with authentication disabled by defaultMervinPraison PraisonAI
CVE-2026-47392PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)MervinPraison < 1.6.40
CVE-2026-47391PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool executionMervinPraison PraisonAI
CVE-2026-47390PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodingsMervinPraison praisonaiagents
CVE-2026-44340PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`MervinPraison PraisonAI
CVE-2026-44339PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables executeMervinPraison PraisonAI
CVE-2026-44338PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated…MervinPraison PraisonAI
CVE-2026-44337PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queriesMervinPraison PraisonAI
CVE-2026-44336PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injectionMervinPraison PraisonAI
CVE-2026-41497Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAIMervinPraison PraisonAI
CVE-2026-41496PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for…MervinPraison PraisonAI
CVE-2026-40315PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queriesMervinPraison PraisonAI
CVE-2026-40313PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential PersistenceMervinPraison PraisonAI
CVE-2026-40289PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessionsMervinPraison praisonaiagents
CVE-2026-40160PraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallbackMervinPraison PraisonAIAgents
CVE-2026-40159PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess ExecutionMervinPraison PraisonAI
CVE-2026-40158PraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonaiMervinPraison PraisonAI
CVE-2026-40157PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`MervinPraison PraisonAI
CVE-2026-40156PraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` LoadingMervinPraison PraisonAI
CVE-2026-40153PraisonAIAgents Affected by Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in…MervinPraison PraisonAIAgents
CVE-2026-40152PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace BoundaryMervinPraison PraisonAIAgents
CVE-2026-40151PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOSMervinPraison PraisonAI
CVE-2026-40150PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl ToolMervinPraison PraisonAIAgents
CVE-2026-40149PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety ControlsMervinPraison PraisonAI
CVE-2026-40148PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size LimitsMervinPraison PraisonAI
CVE-2026-40117PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval GateMervinPraison PraisonAIAgents
CVE-2026-40116PraisonAI's Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate LimitsMervinPraison PraisonAI
CVE-2026-40115PraisonAI has an Unrestricted Upload Size in WSGI Recipe Registry Server Enables Memory Exhaustion DoSMervinPraison PraisonAI
CVE-2026-40114PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs APIMervinPraison PraisonAI
CVE-2026-40113PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-varsMervinPraison PraisonAI
CVE-2026-40112PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)MervinPraison PraisonAI
CVE-2026-40111PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)MervinPraison PraisonAIAgents
CVE-2026-40088Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonaiMervinPraison PraisonAI
CVE-2026-39890PraisonAI Affected by Remote Code Execution via YAML Deserialization in Agent Definition LoadingMervinPraison PraisonAI
CVE-2026-39889PraisonAI has Unauthenticated SSE Event Stream Exposes All Agent Activity in A2U ServerMervinPraison PraisonAI
CVE-2026-39888PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)MervinPraison praisonaiagents
CVE-2026-39308PraisonAI recipe registry publish path traversal allows out-of-root file writeMervinPraison PraisonAI
CVE-2026-39307PraisonAI has an Arbitrary File Write (Zip Slip) in Templates ExtractionMervinPraison PraisonAI
CVE-2026-39306PraisonAI recipe registry pull path traversal writes files outside the chosen output directoryMervinPraison PraisonAI
CVE-2026-34955PraisonAI: Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandboxMervinPraison PraisonAI
CVE-2026-34954PraisonAI: SSRF in FileTools.download_file() via Unvalidated URLMervinPraison PraisonAI
CVE-2026-34953PraisonAI: Authentication Bypass in OAuthManager.validate_token()MervinPraison PraisonAI
CVE-2026-34939PraisonAI: ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()MervinPraison PraisonAI
CVE-2026-34938PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_codeMervinPraison PraisonAI
CVE-2026-34937PraisonAI: Shell Injection in run_python() via Unescaped $() SubstitutionMervinPraison PraisonAI
CVE-2026-34936PraisonAI: SSRF via Unvalidated api_base in passthrough() FallbackMervinPraison PraisonAI
CVE-2026-34935PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()MervinPraison PraisonAI
CVE-2026-34934PraisonAI: Second-Order SQL Injection in `get_all_user_threads`MervinPraison PraisonAI
CVE-2025-12019Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scriptingmervinpraison Featured Image
158 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.