Mervinpraison vulnerabilities
178 CVEs and advisories name Mervinpraison as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-57141PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool
- CVE-2026-57112PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools
- CVE-2026-57145PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation
- CVE-2026-57132PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication
- CVE-2026-57131praisonai: Jobs API exposes agent-execution endpoints with no authentication
- CVE-2026-57124PraisonAI UI MCP connect endpoint allows unauthenticated local command execution
- CVE-2026-57122PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)
- CVE-2026-57127praisonai: recipe serve auth middleware silently disables itself when no secret is set
- CVE-2026-56839PraisonAI Code agent tools fail open without a workspace boundary
- CVE-2026-57119PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs API
- CVE-2026-57129PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal
- CVE-2026-57126praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS
- CVE-2026-57120PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder
- CVE-2026-57123PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in
- CVE-2026-57130PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters
- CVE-2026-57128PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint
- CVE-2026-57115PraisonAI: SpiderTools redirect-target SSRF protection bypass
- CVE-2026-57125PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass
- CVE-2026-55536Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)
- CVE-2026-55532PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server
- CVE-2026-55533PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret
- CVE-2026-55539PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete
- CVE-2026-55527PraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location
- CVE-2026-55541PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced
- CVE-2026-55535PraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation
- CVE-2026-55537PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114
- CVE-2026-55538PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated
- CVE-2026-55540PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks
- CVE-2026-55530PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool
- CVE-2026-55534PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution