Login Request a demo
PR
Product
Praisonai
by Praison · last CVE May 8, 2026
43
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities43In the news1Timeline
Severity mix
Critical 17High 21Medium 5Low 0
Severity
All severities43Critical17High21Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Praisonai to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40114
10.0
0%
Apr 9
PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API
Affected: before 4.5.128
CVE-2026-39305
10.0
0%
Apr 7
Arbitrary File Write / Path Traversal in Action Orchestrator
Affected: through 4.5.112
CVE-2026-34955
10.0
0%
Apr 3
PraisonAI: Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox
Affected: before 4.5.97
CVE-2026-39888
9.9
0%
Apr 8
PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
Affected: before 1.5.115
CVE-2026-41497
9.8
1%
May 8
Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI
Affected: before 4.6.9
CVE-2026-40288
9.8
1%
Apr 14
PraisonAI: Critical RCE via `type: job` workflow YAML
Affected: before 4.5.139
CVE-2026-40315
9.8
0%
Apr 14
PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries
Affected: before 4.5.133
CVE-2026-39890
9.8
1%
Apr 8
PraisonAI Affected by Remote Code Execution via YAML Deserialization in Agent Definition Loading
Affected: through 4.5.114
CVE-2026-34934
9.8
1%
Apr 3
PraisonAI: Second-Order SQL Injection in `get_all_user_threads`
Affected: before 4.5.90
CVE-2026-34935
9.8
1%
Apr 3
PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()
Affected: 4.5.15 before 4.5.69
CVE-2026-44336
9.6
1%
May 8
PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection
Affected: before 4.6.34
CVE-2026-40154
9.6
0%
Apr 9
PraisonAI Affected by Untrusted Remote Template Code Execution
Affected: before 4.5.128
CVE-2026-40088
9.6
0%
Apr 9
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai
Affected: before 4.5.121
CVE-2026-40313
9.1
0%
Apr 14
PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence
Affected: before 4.5.140
CVE-2026-40289
9.1
0%
Apr 14
PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions
Affected: before 4.5.139
CVE-2026-34953
9.1
0%
Apr 3
PraisonAI: Authentication Bypass in OAuthManager.validate_token()
Affected: before 4.5.97
CVE-2026-34952
9.1
0%
Apr 3
PraisonAI: Missing Authentication in WebSocket Gateway
Affected: before 4.5.97
Showing 17