PR
Product
Praisonaiagents
by Praison · last CVE May 8, 2026
15
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 4Low 0
Watch

Add Praisonaiagents to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40111
8.8
0%
Apr 9
PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)
Affected: before 1.5.128
CVE-2026-44339
8.6
0%
May 8
PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute
Affected: before 1.6.37
CVE-2026-34954
8.6
0%
Apr 3
PraisonAI: SSRF in FileTools.download_file() via Unvalidated URL
Affected: before 1.5.95
CVE-2026-40287
8.4
0%
Apr 14
PraisonAI has RCE via Automatic tools.py Import
Affected: before 1.5.140
CVE-2026-41496
8.1
0%
May 8
PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)
Affected: before 1.6.9
CVE-2026-40117
7.5
0%
Apr 9
PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate
Affected: before 1.5.128
Showing 6