Security advisories

critical2026-06-18

CVE-2026-57145-PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

mervinpraison/praisonai · GHSA-29w3-p9w9-wc47

high2026-06-18

CVE-2026-57146-PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default

mervinpraison/praisonai · GHSA-jxcw-qp4h-6jfq

high2026-06-18

CVE-2026-57142-PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml

mervinpraison/praisonai · GHSA-7qw2-w5rc-37x2

high2026-06-18

CVE-2026-57133-npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining

mervinpraison/praisonai · GHSA-5jv7-2mjm-h6qj

high2026-06-18

CVE-2026-57137-npm PraisonAI AgentLoop onToolCall approval runs after tool execution

mervinpraison/praisonai · GHSA-h2w2-v7j6-xqm4

critical2026-06-18

CVE-2026-57139-npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call

mervinpraison/praisonai · GHSA-j4f3-55x4-r6q2

critical2026-06-18

CVE-2026-57140-npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation

mervinpraison/praisonai · GHSA-9752-mhqh-h34f

critical2026-06-18

CVE-2026-57141-PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

mervinpraison/praisonai · GHSA-p69m-4f92-2v84

high2026-06-18

CVE-2026-57136-npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

mervinpraison/praisonai · GHSA-vjv9-7m7j-h833

critical2026-06-18

CVE-2026-57138-npm PraisonAI codeMode sandbox escape via Function constructor

mervinpraison/praisonai · GHSA-vmmj-pfw7-fjwp

high2026-06-18

CVE-2026-57135-npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients

mervinpraison/praisonai · GHSA-gqmf-56h7-rrpf

high2026-06-18

CVE-2026-57134-npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation

mervinpraison/praisonai · GHSA-4qq2-2j2x-x62c

high2026-06-18

CVE-2026-57130-PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters

mervinpraison/praisonai · GHSA-c969-5x3p-vq3v

high2026-06-18

CVE-2026-57113-PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

mervinpraison/praisonai · GHSA-f44v-7qgw-9gh9

high2026-06-18

CVE-2026-57209-Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode

dadrus/heimdall · GHSA-4jgr-pg2m-m988

high2026-06-18

CVE-2026-57210-Heimdall: IP Spoofing via Unvalidated Forwarding Headers

dadrus/heimdall · GHSA-38x9-25wx-7fg2

high2026-06-18

CVE-2026-56839-PraisonAI Code agent tools fail open without a workspace boundary

mervinpraison/praisonai · GHSA-gcq3-mfvh-3x25

critical2026-06-18

CVE-2026-57124-PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai

mervinpraison/praisonai · GHSA-p75f-6fp4-p57w

high2026-06-18

CVE-2026-57122-PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)

mervinpraison/praisonai · GHSA-x92v-rpx6-p6cw

high2026-06-18

CVE-2026-57121-PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API

mervinpraison/praisonai · GHSA-rh39-9c67-59mh