PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API

Arbitrary File Write / Path Traversal in Action Orchestrator

PraisonAI: Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox

PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)

Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI

PraisonAI: Critical RCE via `type: job` workflow YAML

PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

PraisonAI Affected by Remote Code Execution via YAML Deserialization in Agent Definition Loading

PraisonAI: Second-Order SQL Injection in `get_all_user_threads`

PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection

PraisonAI Affected by Untrusted Remote Template Code Execution

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai

PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

PraisonAI: Authentication Bypass in OAuthManager.validate_token()

PraisonAI: Missing Authentication in WebSocket Gateway

PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`

PraisonAI has a Template Injection in Agent Tool Definitions

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute

PraisonAI: Unauthenticated RCE via `tool_override.py`

PraisonAI has RCE via Automatic tools.py Import

PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)

PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars

PraisonAI has an Arbitrary File Write (Zip Slip) in Templates Extraction

PraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonai

PraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading

PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback

PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`

PraisonAI's Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits

PraisonAI has an Unrestricted Upload Size in WSGI Recipe Registry Server Enables Memory Exhaustion DoS

PraisonAI has Unauthenticated SSE Event Stream Exposes All Agent Activity in A2U Server

PraisonAI has a Path Traversal in FileTools

PraisonAI: ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()

PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls

PraisonAI recipe registry pull path traversal writes files outside the chosen output directory

PraisonAI recipe registry publish path traversal allows out-of-root file write

PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits

PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries

PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)

PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess Execution

PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS