CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,468 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,468
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product mervinpraison:praisonai. Show all products

47 CVEs, showing 1 to 47
CVESeverityTitlePublished
CVE-2026-48168Critical 10.0PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch name
Assigned by GitHub_M
Aug 5, 2026
CVE-2026-55522High 7.8PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code
Assigned by GitHub_M
Aug 5, 2026
CVE-2026-55523High 7.7PraisonAI has a`web_crawl` SSRF protection bypass via unchecked redirect targets
Assigned by GitHub_M
Aug 5, 2026
CVE-2026-55524High 7.5PraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)
Assigned by GitHub_M
Aug 5, 2026
CVE-2026-55525High 7.5PraisonAI: SSRF via redirect-following in praisonaiagents web_crawl
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55529Medium 6.9PraisonAI: Origin validation bypass in MCP HTTP Stream transport allows browser-mediated unauthenticated tool execution on local MCP server
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55528High 8.2praisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862)
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55531Medium 6.5PraisonAI: Unauthenticated unbounded session accumulation in the PraisonAI MCP HTTP server (memory exhaustion; session TTL never enforced)
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55526High 8.5PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55534High 8.6PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55530Medium 6.1PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55540High 7.1PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55538High 7.3PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55537High 7.1PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55535Medium 6.8PraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55541High 8.8PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55527High 7.1PraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55539High 8.6PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55533High 8.2PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55532High 7.6PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-55536Critical 9.1Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)
Assigned by GitHub_M
Aug 25, 2026
CVE-2026-57125Critical 9.8PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57115Medium 6.5PraisonAI: SpiderTools redirect-target SSRF protection bypass
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57128Medium 4.3PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57126High 8.5praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57119High 7.5PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs API
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-56839High 7.3PraisonAI Code agent tools fail open without a workspace boundary
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57127Critical 9.8praisonai: recipe serve auth middleware silently disables itself when no secret is set
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57122High 8.6PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57124Critical 9.8PraisonAI UI MCP connect endpoint allows unauthenticated local command execution
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57131Critical 9.8praisonai: Jobs API exposes agent-execution endpoints with no authentication
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57132High 8.2PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57145Critical 9.1PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation
Assigned by GitHub_M
Sep 14, 2026
CVE-2026-57112High 8.3PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57141Critical 9.8PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57137High 8.8PraisonAI AgentLoop onToolCall approval runs after tool execution
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57136High 8.8PraisonAI SandboxExecutor allowedCommands bypass via shell chaining
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57138Critical 9.9PraisonAI codeMode sandbox escape via Function constructor
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57134High 8.2PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57135High 7.6PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57133High 8.8PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57139Critical 9.8PraisonAI MCPServer exposes unauthenticated HTTP tools/call
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57140Critical 9.4PraisonAI AgentOS exposes unauthenticated agent listing and invocation
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57148Critical 9.8praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-57147Critical 9.8praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-62176Critical 9.1PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation
Assigned by GitHub_M
Oct 7, 2026
CVE-2026-57118Critical 9.8PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints
Assigned by GitHub_M
Oct 12, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.