Security Advisories | GitStock

high2026-08-25

CVE-2026-55581-mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable

sonirico/mcp-shell · GHSA-3x77-wg38-92r3

high2026-08-25

CVE-2026-55582-mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias

sonirico/mcp-shell · GHSA-74hp-mggr-hv58

critical2026-08-25

CVE-2026-55546-qwed-mcp has Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input

qwed-ai/qwed-mcp · GHSA-mw6r-2hvm-4rp2

critical2026-08-25

CVE-2026-55536-PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)

mervinpraison/praisonai · GHSA-6g6r-q6gw-w8fg

high2026-08-25

CVE-2026-55532-PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server

mervinpraison/praisonai · GHSA-pvph-5j39-v8qc

high2026-08-25

CVE-2026-55533-PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret

mervinpraison/praisonai · GHSA-gfq8-hmph-9gjv

high2026-08-25

CVE-2026-55539-PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete

mervinpraison/praisonai · GHSA-2jgc-f764-c5r2

high2026-08-25

CVE-2026-55527-praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location

mervinpraison/praisonai · GHSA-gxmw-5f7x-6g22

high2026-08-25

CVE-2026-55541-PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced

mervinpraison/praisonai · GHSA-pvxx-r596-f5qj

medium2026-08-25

CVE-2026-55535-PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation

mervinpraison/praisonai · GHSA-hmfx-4v44-9qw9

high2026-08-25

CVE-2026-55537-PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114

mervinpraison/praisonai · GHSA-rg5q-pp8p-f7jm

high2026-08-25

CVE-2026-55538-PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated

mervinpraison/praisonai · GHSA-r7v3-x45f-g7hp

high2026-08-25

CVE-2026-55540-PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks

mervinpraison/praisonai · GHSA-ch89-h4r2-c8f8

medium2026-08-25

CVE-2026-55530-praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool

mervinpraison/praisonai · GHSA-cfxv-8fw8-rwpv

high2026-08-25

CVE-2026-55524-praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)

mervinpraison/praisonai · GHSA-vg6p-v9vm-6fgj

high2026-08-25

CVE-2026-55534-PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution

mervinpraison/praisonai · GHSA-7ww9-85pg-cv4x

high2026-08-25

CVE-2026-55526-praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

mervinpraison/praisonai · GHSA-x44h-65qv-cw74

medium2026-08-25

CVE-2026-55531-PraisonAI MCP HTTP server has unauthenticated unbounded session accumulation (memory exhaustion; session TTL never enforced)

mervinpraison/praisonai · GHSA-wv94-5qcp-6m36

high2026-08-25

CVE-2026-55528-praisonaiagents: AgentServer declares auth_token but never enforces it on any route

mervinpraison/praisonai · GHSA-7g3p-92qq-8wvh

medium2026-08-25

CVE-2026-55529-PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server

mervinpraison/praisonai · GHSA-wj6g-v78p-6fx3