Skip to main content
cve.nowby Sazabi
← npm
npmPackage

praisonai

10 known vulnerabilities (4 critical, 6 high), with the versions each affects and the releases that fix them.

Latest release
1.7.4 (Sep 2, 2026): no advisory affects it
Newest unaffected release
1.7.4 (Sep 2, 2026), the latest release
Advisories
10 · 4 critical, 6 high
Weekly downloads
848
Dependents
3
Releases
45 since 1.0.0 (Jan 13, 2025)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 10

  • CVE-2026-57140Critical 9.4

    PraisonAI AgentOS exposes unauthenticated agent listing and invocation

    Affected: from 1.6.0, fixed in 1.7.2.

    Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure).

    The latest release, 1.7.4, is not affected.

    14% of praisonai downloads last week were affected versions (124).

  • CVE-2026-57139Critical 9.8

    PraisonAI MCPServer exposes unauthenticated HTTP tools/call

    Affected: from 1.5.0, fixed in 1.7.2.

    Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure).

    The latest release, 1.7.4, is not affected.

    25% of praisonai downloads last week were affected versions (228).

  • PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining

    Affected: from 1.5.1, fixed in 1.7.2.

    Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure).

    The latest release, 1.7.4, is not affected.

    23% of praisonai downloads last week were affected versions (207).

  • PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients

    Affected: from 1.2.3, fixed in 1.7.2.

    Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure).

    The latest release, 1.7.4, is not affected.

    39% of praisonai downloads last week were affected versions (355).

  • PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation

    Affected: from 1.5.1, fixed in 1.7.2.

    Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure).

    The latest release, 1.7.4, is not affected.

    23% of praisonai downloads last week were affected versions (207).

  • CVE-2026-57138Critical 9.9

    PraisonAI codeMode sandbox escape via Function constructor

    Affected: from 1.4.0, fixed in 1.7.2.

    Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure).

    The latest release, 1.7.4, is not affected.

    26% of praisonai downloads last week were affected versions (242).

  • PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

    Affected: from 1.2.3, fixed in 1.7.2.

    Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure).

    The latest release, 1.7.4, is not affected.

    39% of praisonai downloads last week were affected versions (355).

  • PraisonAI AgentLoop onToolCall approval runs after tool execution

    Affected: from 1.4.0, fixed in 1.7.2.

    Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure).

    The latest release, 1.7.4, is not affected.

    26% of praisonai downloads last week were affected versions (242).

  • CVE-2026-57141Critical 9.8

    PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

    Affected: fixed in 1.7.2.

    Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure).

    The latest release, 1.7.4, is not affected.

    56% of praisonai downloads last week were affected versions (514).

  • PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults

    Affected: fixed in 1.7.3.

    Fixed in 1.7.3 (released Jun 25, 2026, 16 days before disclosure).

    The latest release, 1.7.4, is not affected.

    61% of praisonai downloads last week were affected versions (556).