praison records

53 published records for vendor praison.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 9
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

53 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
44Plan	CVE-2026-34938No exploit	PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_codepraison · praisonaiagents · CWE-693 pre-auth RCE	Critical10.0	—	13.1%	Apr 3, 2026
40Plan	CVE-2026-34955No exploit	PraisonAI: Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandboxpraison · praisonai · CWE-78 pre-auth RCE Command injection	Critical10.0	—	0.3%	Apr 3, 2026
40Plan	CVE-2026-39305No exploit	Arbitrary File Write / Path Traversal in Action Orchestratorpraison · praisonai · CWE-22 Pre-auth Path traversal	Critical10.0	—	0.3%	Apr 7, 2026
40Plan	CVE-2026-40114No exploit	PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs APIpraison · praisonai · CWE-918 Pre-auth SSRF	Critical10.0	—	0.2%	Apr 9, 2026
39Monitor	CVE-2026-44338Proof of concept	PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow executionpraison · praisonai · CWE-306 Pre-auth Auth bypass	High7.3	—	32.5%	May 8, 2026
39Monitor	CVE-2026-34935No exploit	PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()praison · praisonai · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.8%	Apr 3, 2026
39Monitor	CVE-2026-40288No exploit	PraisonAI: Critical RCE via `type: job` workflow YAMLpraison · praisonai · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.6%	Apr 14, 2026
39Monitor	CVE-2026-39890No exploit	PraisonAI Affected by Remote Code Execution via YAML Deserialization in Agent Definition Loadingpraison · praisonai · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	0.5%	Apr 8, 2026
39Monitor	CVE-2026-34937No exploit	PraisonAI: Shell Injection in run_python() via Unescaped $() Substitutionpraison · praisonaiagents · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.5%	Apr 3, 2026
39Monitor	CVE-2026-41497No exploit	Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAIpraison · praisonai · CWE-77 pre-auth RCE Command injection	Critical9.8	—	0.5%	May 8, 2026
39Monitor	CVE-2026-34934No exploit	PraisonAI: Second-Order SQL Injection in `get_all_user_threads`praison · praisonai · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.5%	Apr 3, 2026
39Monitor	CVE-2026-39888No exploit	PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)praison · praisonai · CWE-657	Critical9.9	—	0.4%	Apr 8, 2026
38Monitor	CVE-2026-40088No exploit	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonaipraison · praisonai · CWE-78 pre-auth RCE Command injection	Critical9.6	—	0.4%	Apr 9, 2026
38Monitor	CVE-2026-40154No exploit	PraisonAI Affected by Untrusted Remote Template Code Executionpraison · praisonai · CWE-829 Pre-auth	Critical9.6	—	0.3%	Apr 9, 2026
37Monitor	CVE-2026-44336No exploit	PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injectionpraison · praisonai · CWE-20 pre-auth RCE	Critical9.4	—	0.6%	May 8, 2026
37Monitor	CVE-2026-40157No exploit	PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`praison · praisonai · CWE-22 Pre-auth Path traversal	Critical9.4	—	0.3%	Apr 10, 2026
37Monitor	CVE-2026-40111No exploit	PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)praison · praisonaiagents · CWE-78 RCE Command injection	Critical9.3	—	0.2%	Apr 9, 2026
36Monitor	CVE-2026-34952No exploit	PraisonAI: Missing Authentication in WebSocket Gatewaypraison · praisonai · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.4%	Apr 3, 2026
36Monitor	CVE-2026-40289No exploit	PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessionspraison · praisonai · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.4%	Apr 14, 2026
36Monitor	CVE-2026-35615No exploit	PraisonAI has a Path Traversal in FileToolspraison · praisonai · CWE-22 Pre-auth Path traversal	Critical9.2	—	0.4%	Apr 7, 2026
36Monitor	CVE-2026-34953No exploit	PraisonAI: Authentication Bypass in OAuthManager.validate_token()praison · praisonai · CWE-863 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.1	—	0.3%	Apr 3, 2026
36Monitor	CVE-2026-40313No exploit	PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistencepraison · praisonai · CWE-829 Pre-auth	Critical9.1	—	0.3%	Apr 14, 2026
35Monitor	CVE-2026-39891No exploit	PraisonAI has a Template Injection in Agent Tool Definitionspraison · praisonai · CWE-94 RCE SSTI	High8.8	—	0.5%	Apr 8, 2026
34Monitor	CVE-2026-44340No exploit	PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`praison · praisonai · CWE-22 Pre-auth Path traversal	High8.7	—	0.4%	May 8, 2026
34Monitor	CVE-2026-34954No exploit	PraisonAI: SSRF in FileTools.download_file() via Unvalidated URLpraison · praisonaiagents · CWE-918 Pre-auth SSRF	High8.6	—	0.4%	Apr 3, 2026

CVE-2026-34938
44Plan
PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code
CriticalCVSS 10.0No exploitEPSS 13%
- pre-auth RCE
praison · praisonaiagentsApr 3, 2026
CVE-2026-34955
40Plan
PraisonAI: Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- Command injection
praison · praisonaiApr 3, 2026
CVE-2026-39305
40Plan
Arbitrary File Write / Path Traversal in Action Orchestrator
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Path traversal
praison · praisonaiApr 7, 2026
CVE-2026-40114
40Plan
PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- SSRF
praison · praisonaiApr 9, 2026
CVE-2026-44338
39Monitor
PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution
HighCVSS 7.3Proof of conceptEPSS 32%
- Pre-auth
- Auth bypass
praison · praisonaiMay 8, 2026
CVE-2026-34935
39Monitor
PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
praison · praisonaiApr 3, 2026
CVE-2026-40288
39Monitor
PraisonAI: Critical RCE via `type: job` workflow YAML
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
praison · praisonaiApr 14, 2026
CVE-2026-39890
39Monitor
PraisonAI Affected by Remote Code Execution via YAML Deserialization in Agent Definition Loading
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
praison · praisonaiApr 8, 2026
CVE-2026-34937
39Monitor
PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
praison · praisonaiagentsApr 3, 2026
CVE-2026-41497
39Monitor
Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
praison · praisonaiMay 8, 2026
CVE-2026-34934
39Monitor
PraisonAI: Second-Order SQL Injection in `get_all_user_threads`
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
praison · praisonaiApr 3, 2026
CVE-2026-39888
39Monitor
PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
CriticalCVSS 9.9No exploitEPSS 0%
praison · praisonaiApr 8, 2026
CVE-2026-40088
38Monitor
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Command injection
praison · praisonaiApr 9, 2026
CVE-2026-40154
38Monitor
PraisonAI Affected by Untrusted Remote Template Code Execution
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
praison · praisonaiApr 9, 2026
CVE-2026-44336
37Monitor
PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection
CriticalCVSS 9.4No exploitEPSS 0%
- pre-auth RCE
praison · praisonaiMay 8, 2026
CVE-2026-40157
37Monitor
PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Path traversal
praison · praisonaiApr 10, 2026
CVE-2026-40111
37Monitor
PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)
CriticalCVSS 9.3No exploitEPSS 0%
- RCE
- Command injection
praison · praisonaiagentsApr 9, 2026
CVE-2026-34952
36Monitor
PraisonAI: Missing Authentication in WebSocket Gateway
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
praison · praisonaiApr 3, 2026
CVE-2026-40289
36Monitor
PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
praison · praisonaiApr 14, 2026
CVE-2026-35615
36Monitor
PraisonAI has a Path Traversal in FileTools
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Path traversal
praison · praisonaiApr 7, 2026
CVE-2026-34953
36Monitor
PraisonAI: Authentication Bypass in OAuthManager.validate_token()
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
praison · praisonaiApr 3, 2026
CVE-2026-40313
36Monitor
PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
praison · praisonaiApr 14, 2026
CVE-2026-39891
35Monitor
PraisonAI has a Template Injection in Agent Tool Definitions
HighCVSS 8.8No exploitEPSS 0%
- RCE
- SSTI
praison · praisonaiApr 8, 2026
CVE-2026-44340
34Monitor
PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
praison · praisonaiMay 8, 2026
CVE-2026-34954
34Monitor
PraisonAI: SSRF in FileTools.download_file() via Unvalidated URL
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SSRF
praison · praisonaiagentsApr 3, 2026