Mervinpraison vulnerabilities
178 CVEs and advisories name Mervinpraison as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-57117PraisonAI: Compute-bridged file tools allow shell command injection
- CVE-2026-57146PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default
- CVE-2026-57144PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable
- CVE-2026-57142PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml
- CVE-2026-57121PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API
- CVE-2026-57116PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation
- CVE-2026-57114PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding
- CVE-2026-57113PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion
- CVE-2026-56840PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools
- CVE-2026-56838PraisonAI recipe.run_stream skips dangerous-tool policy enforcement
- CVE-2026-56837PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing
- CVE-2026-56836PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard
- CVE-2026-56835PraisonAI Slack app_mention bypasses configured user/channel authorization
- CVE-2026-56834PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage
- CVE-2026-56833PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal
- CVE-2026-56832PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals
- CVE-2026-57118PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints
- CVE-2026-57143PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter
- CVE-2026-62176PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation
- CVE-2026-62179PraisonAI: Platform members can delete owner issue dependencies through member-owned related issues
- CVE-2026-57147praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery
- CVE-2026-57148praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
- CVE-2026-57140PraisonAI AgentOS exposes unauthenticated agent listing and invocation
- CVE-2026-57139PraisonAI MCPServer exposes unauthenticated HTTP tools/call
- CVE-2026-57133PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
- CVE-2026-57135PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients
- CVE-2026-57134PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation
- CVE-2026-57138PraisonAI codeMode sandbox escape via Function constructor
- CVE-2026-57136PraisonAI SandboxExecutor allowedCommands bypass via shell chaining
- CVE-2026-57137PraisonAI AgentLoop onToolCall approval runs after tool execution