Security advisories

critical2026-06-18

CVE-2026-57116-PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation

mervinpraison/praisonai · GHSA-892r-p3jq-jp24

critical2026-06-18

CVE-2026-57118-PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

mervinpraison/praisonai · GHSA-x8cv-xmq7-p8xp

high2026-06-18

CVE-2026-57114-PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding

mervinpraison/praisonai · GHSA-rjvw-7vvw-549v

critical2026-06-18

CVE-2026-57131-PraisonAI: Jobs API exposes agent-execution endpoints with no authentication

mervinpraison/praisonai · GHSA-fq2m-6wqh-x44g

high2026-06-18

CVE-2026-57129-PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

mervinpraison/praisonai · GHSA-2rcg-mm5h-xchx

critical2026-06-18

CVE-2026-57127-praisonai: recipe serve auth middleware silently disables itself when no secret is set

mervinpraison/praisonai · GHSA-j4hj-7hfh-g2f4

high2026-06-18

CVE-2026-57126-praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS

mervinpraison/praisonai · GHSA-vxgj-xg5c-p4h7

critical2026-06-18

CVE-2026-57125-PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass

mervinpraison/praisonai · GHSA-4869-x4pr-q22x

high2026-06-18

CVE-2026-57119-PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API

mervinpraison/praisonai · GHSA-p4pj-vh7h-6cqh

critical2026-06-18

CVE-2026-57123-PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in

mervinpraison/praisonai · GHSA-x227-pf99-vffg

medium2026-06-18

CVE-2026-57120-PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder

mervinpraison/praisonai · GHSA-pv2j-rghr-v5r9

medium2026-06-18

CVE-2026-57115-PraisonAI: SpiderTools redirect-target SSRF protection bypass

mervinpraison/praisonai · GHSA-6h9p-93hq-q7h6

high2026-06-18

CVE-2026-57117-PraisonAI: Compute-bridged file tools allow shell command injection

mervinpraison/praisonai · GHSA-w6h2-fr4q-xvxv

high2026-06-18

CVE-2026-56838-PraisonAI recipe.run_stream skips dangerous-tool policy enforcement

mervinpraison/praisonai · GHSA-v847-hxxw-3pxg

high2026-06-18

CVE-2026-56840-PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools

mervinpraison/praisonai · GHSA-63v4-w882-g4x2

high2026-06-18

CVE-2026-56837-PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing

mervinpraison/praisonai · GHSA-fc26-m9pf-v56q

high2026-06-18

CVE-2026-56834-PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage

mervinpraison/praisonai · GHSA-j7qx-p75m-wp7g

high2026-06-18

CVE-2026-56835-PraisonAI Slack app_mention bypasses configured user/channel authorization

mervinpraison/praisonai · GHSA-qvpf-j64c-jmhr

high2026-06-18

CVE-2026-56836-PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard

mervinpraison/praisonai · GHSA-5qw8-f2g9-ff29

high2026-06-18

CVE-2026-57112-PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools

mervinpraison/praisonai · GHSA-vmf9-xx9w-86wx