# praisonai (npm) vulnerabilities 10 known vulnerabilities (4 critical, 6 high), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 1.7.4 (Sep 2, 2026): no advisory affects it - Newest unaffected release: 1.7.4 (Sep 2, 2026), the latest release - Weekly downloads: 848 - Dependents: 3 - Releases: 45 since 1.0.0 (Jan 13, 2025) - Registry: https://www.npmjs.com/package/praisonai - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-57140: 1.6.0 to 1.7.1 (1.7.2 is outside it) - CVE-2026-57139: 1.5.0 to 1.7.1 (1.7.2 is outside it) - CVE-2026-57133: 1.5.1 to 1.7.1 (1.7.2 is outside it) - CVE-2026-57135: 1.2.3 to 1.7.1 (1.7.2 is outside it) - CVE-2026-57134: 1.5.1 to 1.7.1 (1.7.2 is outside it) - CVE-2026-57138: 1.4.0 to 1.7.1 (1.7.2 is outside it) - CVE-2026-57136: 1.2.3 to 1.7.1 (1.7.2 is outside it) - CVE-2026-57137: 1.4.0 to 1.7.1 (1.7.2 is outside it) - CVE-2026-57141: 1.0.0 to 1.7.1 (1.7.2 is outside it) - CVE-2026-61426: 1.0.0 to 1.7.2 (1.7.3 is outside it) ## Advisories (10) ### [CVE-2026-57140](https://cve.now/CVE-2026-57140): PraisonAI AgentOS exposes unauthenticated agent listing and invocation - Severity: Critical 9.4 - Published: Sep 15, 2026 - Affected: from 1.6.0, fixed in 1.7.2. - Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 1.7.4, is not affected. - 14% of praisonai downloads last week were affected versions (124). ### [CVE-2026-57139](https://cve.now/CVE-2026-57139): PraisonAI MCPServer exposes unauthenticated HTTP tools/call - Severity: Critical 9.8 - Published: Sep 15, 2026 - Affected: from 1.5.0, fixed in 1.7.2. - Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 1.7.4, is not affected. - 25% of praisonai downloads last week were affected versions (228). ### [CVE-2026-57133](https://cve.now/CVE-2026-57133): PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining - Severity: High 8.8 - Published: Sep 15, 2026 - Affected: from 1.5.1, fixed in 1.7.2. - Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 1.7.4, is not affected. - 23% of praisonai downloads last week were affected versions (207). ### [CVE-2026-57135](https://cve.now/CVE-2026-57135): PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients - Severity: High 7.6 - Published: Sep 15, 2026 - Affected: from 1.2.3, fixed in 1.7.2. - Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 1.7.4, is not affected. - 39% of praisonai downloads last week were affected versions (355). ### [CVE-2026-57134](https://cve.now/CVE-2026-57134): PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation - Severity: High 8.2 - Published: Sep 15, 2026 - Affected: from 1.5.1, fixed in 1.7.2. - Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 1.7.4, is not affected. - 23% of praisonai downloads last week were affected versions (207). ### [CVE-2026-57138](https://cve.now/CVE-2026-57138): PraisonAI codeMode sandbox escape via Function constructor - Severity: Critical 9.9 - Published: Sep 15, 2026 - Affected: from 1.4.0, fixed in 1.7.2. - Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 1.7.4, is not affected. - 26% of praisonai downloads last week were affected versions (242). ### [CVE-2026-57136](https://cve.now/CVE-2026-57136): PraisonAI SandboxExecutor allowedCommands bypass via shell chaining - Severity: High 8.8 - Published: Sep 15, 2026 - Affected: from 1.2.3, fixed in 1.7.2. - Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 1.7.4, is not affected. - 39% of praisonai downloads last week were affected versions (355). ### [CVE-2026-57137](https://cve.now/CVE-2026-57137): PraisonAI AgentLoop onToolCall approval runs after tool execution - Severity: High 8.8 - Published: Sep 15, 2026 - Affected: from 1.4.0, fixed in 1.7.2. - Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 1.7.4, is not affected. - 26% of praisonai downloads last week were affected versions (242). ### [CVE-2026-57141](https://cve.now/CVE-2026-57141): PraisonAI: Remote Code Execution via Sandbox Escape in \`codeMode\` Tool - Severity: Critical 9.8 - Published: Sep 15, 2026 - Affected: fixed in 1.7.2. - Fixed in 1.7.2 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 1.7.4, is not affected. - 56% of praisonai downloads last week were affected versions (514). ### [CVE-2026-61426](https://cve.now/CVE-2026-61426): PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults - Severity: High 8.8 - Published: Jul 11, 2026 - Affected: fixed in 1.7.3. - Fixed in 1.7.3 (released Jun 25, 2026, 16 days before disclosure). - The latest release, 1.7.4, is not affected. - 61% of praisonai downloads last week were affected versions (556). --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/npm/praisonai Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.