Mervinpraison vulnerabilities
178 CVEs and advisories name Mervinpraison as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-61431PraisonAI before 4.6.78 Path Traversal via ContextGatherer
- CVE-2026-60091PraisonAI before 4.6.78 Unauthenticated SSRF via webhook_url
- CVE-2026-60089PraisonAI before 1.6.78 Path Traversal via config.toml
- CVE-2026-60086PraisonAI before 4.6.78 Prompt Injection Defense Bypass
- CVE-2026-44340PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`
- CVE-2026-44339PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute
- CVE-2026-44338PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution
- CVE-2026-44337PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries
- CVE-2026-44336PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection
- CVE-2026-44335SSRF bypass in PraisonAI
- CVE-2026-44334PraisonAI: Unauthenticated RCE via `tool_override.py`
- CVE-2026-41497Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI
- CVE-2026-41496PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)
- CVE-2026-40313PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence
- CVE-2026-40289PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions
- CVE-2026-40288PraisonAI: Critical RCE via `type: job` workflow YAML
- CVE-2026-40287PraisonAI has RCE via Automatic tools.py Import
- CVE-2026-40315PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries
- CVE-2026-40160PraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallback
- CVE-2026-40159PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess Execution
- CVE-2026-40158PraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonai
- CVE-2026-40157PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`
- CVE-2026-40156PraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading
- CVE-2026-40154PraisonAI Affected by Untrusted Remote Template Code Execution
- CVE-2026-40151PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS
- CVE-2026-40153PraisonAIAgents Affected by Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool
- CVE-2026-40152PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary
- CVE-2026-40150PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool
- CVE-2026-40149PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls
- CVE-2026-40148PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits