{"schema_version":1,"title":"MervinPraison PraisonAI vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 46 vulnerabilities in MervinPraison PraisonAI: 0 in the last 7 days and 12 in the last 90 days, 10 of them critical and 0 exploited in the wild. The most recent, CVE-2026-57146, was published on 23 October 2026. 11 vulnerabilities in the last four weeks, up 1000% on the four before (1). 0 critical against 1.","url":"https://junglewise.ai/threats/technologies/mervinpraison-praisonai","json_url":"https://junglewise.ai/threats/technologies/mervinpraison-praisonai.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/mervinpraison-praisonai","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":29,"all_time":46,"critical":10,"exploited":0,"last_7_days":0,"last_30_days":11,"last_90_days":12,"last_365_days":46},"latest":[{"cve":"CVE-2026-57146","cvss":7.5,"slug":"cve-2026-57146-praisonai-a2u-incomplete-authentication-fix-leaves-current-serve","title":"PraisonAI authentication bypass in A2U event streaming","severity":"high","exploited":false,"published_at":"2026-10-23T13:17:11.527+00:00","url":"https://junglewise.ai/threats/cve-2026-57146-praisonai-a2u-incomplete-authentication-fix-leaves-current-serve"},{"cve":"CVE-2026-57144","cvss":8.8,"slug":"cve-2026-57144-praisonai-sandlocksandbox-falls-back-to-unrestricted-subprocess","title":"PraisonAI sandbox escape when Landlock unavailable","severity":"high","exploited":false,"published_at":"2026-10-23T13:17:11.37+00:00","url":"https://junglewise.ai/threats/cve-2026-57144-praisonai-sandlocksandbox-falls-back-to-unrestricted-subprocess"},{"cve":"CVE-2026-57142","cvss":7.8,"slug":"cve-2026-57142-praisonai-recipe-workflow-policy-can-be-bypassed-by-declaring-and","title":"PraisonAI recipe policy bypass via YAML-approved tools","severity":"high","exploited":false,"published_at":"2026-10-23T13:17:11.21+00:00","url":"https://junglewise.ai/threats/cve-2026-57142-praisonai-recipe-workflow-policy-can-be-bypassed-by-declaring-and"},{"cve":"CVE-2026-57117","cvss":8.8,"slug":"cve-2026-57117-praisonai-compute-bridged-file-tools-allow-shell-command","title":"PraisonAI shell command injection in compute-bridged file tools","severity":"high","exploited":false,"published_at":"2026-10-23T13:17:10.87+00:00","url":"https://junglewise.ai/threats/cve-2026-57117-praisonai-compute-bridged-file-tools-allow-shell-command"},{"cve":"CVE-2026-57114","cvss":7.2,"slug":"cve-2026-57114-praisonai-jobs-webhook-ssrf-protection-bypass-via-dns-rebinding","title":"PraisonAI Jobs webhook SSRF via DNS rebinding","severity":"high","exploited":false,"published_at":"2026-10-23T13:17:10.533+00:00","url":"https://junglewise.ai/threats/cve-2026-57114-praisonai-jobs-webhook-ssrf-protection-bypass-via-dns-rebinding"},{"cve":"CVE-2026-56838","cvss":7.8,"slug":"cve-2026-56838-praisonai-recipe-run-stream-skips-dangerous-tool-policy","title":"PraisonAI recipe streaming bypasses dangerous tool policy check","severity":"high","exploited":false,"published_at":"2026-10-23T12:18:15.357+00:00","url":"https://junglewise.ai/threats/cve-2026-56838-praisonai-recipe-run-stream-skips-dangerous-tool-policy"},{"cve":"CVE-2026-56837","cvss":8.6,"slug":"cve-2026-56837-praisonai-linearbot-processes-unsigned-webhooks-when-linear","title":"PraisonAI LinearBot missing webhook signature verification","severity":"high","exploited":false,"published_at":"2026-10-23T12:18:15.203+00:00","url":"https://junglewise.ai/threats/cve-2026-56837-praisonai-linearbot-processes-unsigned-webhooks-when-linear"},{"cve":"CVE-2026-56836","cvss":8.2,"slug":"cve-2026-56836-praisonai-recipe-serve-typer-command-bypasses-the-non-localhost","title":"PraisonAI authentication bypass in Recipe Serve command","severity":"high","exploited":false,"published_at":"2026-10-23T12:18:15.05+00:00","url":"https://junglewise.ai/threats/cve-2026-56836-praisonai-recipe-serve-typer-command-bypasses-the-non-localhost"},{"cve":"CVE-2026-56835","cvss":8.3,"slug":"cve-2026-56835-praisonai-slack-app-mention-bypasses-configured-user-channel","title":"PraisonAI authorization bypass in Slack app_mention handler","severity":"high","exploited":false,"published_at":"2026-10-23T12:18:14.897+00:00","url":"https://junglewise.ai/threats/cve-2026-56835-praisonai-slack-app-mention-bypasses-configured-user-channel"},{"cve":"CVE-2026-56834","cvss":7.5,"slug":"cve-2026-56834-praisonai-dynamic-context-artifact-tools-read-arbitrary-host","title":"PraisonAI arbitrary file read in artifact tools","severity":"high","exploited":false,"published_at":"2026-10-23T12:18:14.75+00:00","url":"https://junglewise.ai/threats/cve-2026-56834-praisonai-dynamic-context-artifact-tools-read-arbitrary-host"},{"cve":"CVE-2026-56832","cvss":8.8,"slug":"cve-2026-56832-praisonai-discordapproval-accepts-unrelated-channel-messages-as","title":"PraisonAI DiscordApproval dangerous tool authorization bypass","severity":"high","exploited":false,"published_at":"2026-10-23T12:18:14.437+00:00","url":"https://junglewise.ai/threats/cve-2026-56832-praisonai-discordapproval-accepts-unrelated-channel-messages-as"},{"cve":"CVE-2026-62176","cvss":9.1,"slug":"cve-2026-62176-praisonai-code-injection-via-f-string-interpolation-in-deploy-api","title":"PraisonAI code injection in deploy API server generation","severity":"critical","exploited":false,"published_at":"2026-10-07T16:05:53+00:00","url":"https://junglewise.ai/threats/cve-2026-62176-praisonai-code-injection-via-f-string-interpolation-in-deploy-api"},{"cve":"CVE-2026-61443","cvss":8.1,"epss":0.0077,"slug":"cve-2026-61443-mervinpraison-praisonai-remote-code-execution-in-skilltools","title":"MervinPraison PraisonAI remote code execution in SkillTools","severity":"high","exploited":false,"published_at":"2026-07-15T12:18:19.467+00:00","url":"https://junglewise.ai/threats/cve-2026-61443-mervinpraison-praisonai-remote-code-execution-in-skilltools"},{"cve":"CVE-2026-61438","cvss":7.3,"epss":0.0031,"slug":"cve-2026-61438-mervinpraison-praisonai-remote-code-execution-in","title":"MervinPraison PraisonAI remote code execution in JobWorkflowExecutor","severity":"high","exploited":false,"published_at":"2026-07-15T12:18:18.993+00:00","url":"https://junglewise.ai/threats/cve-2026-61438-mervinpraison-praisonai-remote-code-execution-in"},{"cve":"CVE-2026-61436","cvss":8.6,"epss":0.0031,"slug":"cve-2026-61436-mervinpraison-praisonai-missing-webhook-signature-verification-in","title":"MervinPraison PraisonAI missing webhook signature verification in AgentMail","severity":"high","exploited":false,"published_at":"2026-07-15T12:18:18.847+00:00","url":"https://junglewise.ai/threats/cve-2026-61436-mervinpraison-praisonai-missing-webhook-signature-verification-in"},{"cve":"CVE-2026-61435","cvss":8.2,"epss":0.0069,"slug":"cve-2026-61435-mervinpraison-praisonai-auth-bypass-in-call-api-agent-invocation","title":"MervinPraison PraisonAI auth bypass in Call API agent invocation","severity":"high","exploited":false,"published_at":"2026-07-15T12:18:18.7+00:00","url":"https://junglewise.ai/threats/cve-2026-61435-mervinpraison-praisonai-auth-bypass-in-call-api-agent-invocation"},{"cve":"CVE-2026-61433","cvss":7.8,"epss":0.0021,"slug":"cve-2026-61433-mervinpraison-praisonai-code-injection-in-api-deployment","title":"MervinPraison PraisonAI code injection in API deployment generator","severity":"high","exploited":false,"published_at":"2026-07-15T12:18:18.553+00:00","url":"https://junglewise.ai/threats/cve-2026-61433-mervinpraison-praisonai-code-injection-in-api-deployment"},{"cve":"CVE-2026-61427","cvss":7.3,"epss":0.0039,"slug":"cve-2026-61427-mervinpraison-praisonai-authentication-bypass-in-mcp-http-stream","title":"MervinPraison PraisonAI authentication bypass in MCP HTTP-stream transport","severity":"high","exploited":false,"published_at":"2026-07-15T12:18:18.26+00:00","url":"https://junglewise.ai/threats/cve-2026-61427-mervinpraison-praisonai-authentication-bypass-in-mcp-http-stream"},{"cve":"CVE-2026-60085","cvss":7.5,"epss":0.0026,"slug":"cve-2026-60085-mervinpraison-praisonai-unenforced-security-policy-in-subprocess","title":"MervinPraison PraisonAI unenforced security policy in Subprocess Sandbox","severity":"high","exploited":false,"published_at":"2026-07-15T12:18:17.933+00:00","url":"https://junglewise.ai/threats/cve-2026-60085-mervinpraison-praisonai-unenforced-security-policy-in-subprocess"},{"cve":"CVE-2026-61447","cvss":10,"epss":0.0249,"slug":"cve-2026-61447-mervinpraison-praisonai-remote-code-execution-in-codeagent","title":"MervinPraison PraisonAI remote code execution in CodeAgent","severity":"critical","exploited":false,"published_at":"2026-07-11T14:16:23.377+00:00","url":"https://junglewise.ai/threats/cve-2026-61447-mervinpraison-praisonai-remote-code-execution-in-codeagent"},{"cve":"CVE-2026-61445","cvss":9.9,"epss":0.0088,"slug":"cve-2026-61445-mervinpraison-praisonai-arbitrary-file-write-and-command","title":"MervinPraison PraisonAI arbitrary file write and command execution in AICoder","severity":"critical","exploited":false,"published_at":"2026-07-11T14:16:23.24+00:00","url":"https://junglewise.ai/threats/cve-2026-61445-mervinpraison-praisonai-arbitrary-file-write-and-command"},{"cve":"CVE-2026-61439","cvss":7.5,"epss":0.0043,"slug":"cve-2026-61439-mervinpraison-praisonai-prompt-injection-defense-bypass","title":"MervinPraison PraisonAI prompt injection defense bypass","severity":"high","exploited":false,"published_at":"2026-07-11T14:16:22.87+00:00","url":"https://junglewise.ai/threats/cve-2026-61439-mervinpraison-praisonai-prompt-injection-defense-bypass"},{"cve":"CVE-2026-61426","cvss":8.6,"epss":0.0048,"slug":"cve-2026-61426-mervinpraison-praisonai-missing-authentication-in-agentos-api","title":"MervinPraison PraisonAI missing authentication in AgentOS API","severity":"high","exploited":false,"published_at":"2026-07-11T14:16:22.483+00:00","url":"https://junglewise.ai/threats/cve-2026-61426-mervinpraison-praisonai-missing-authentication-in-agentos-api"},{"cve":"CVE-2026-60090","cvss":9.8,"epss":0.007,"slug":"cve-2026-60090-mervinpraison-praisonai-sql-and-cql-injection-in-knowledge-store","title":"MervinPraison PraisonAI SQL and CQL injection in knowledge-store backends","severity":"critical","exploited":false,"published_at":"2026-07-11T14:16:22.353+00:00","url":"https://junglewise.ai/threats/cve-2026-60090-mervinpraison-praisonai-sql-and-cql-injection-in-knowledge-store"},{"cve":"CVE-2026-60088","cvss":5.5,"epss":0.0018,"slug":"cve-2026-60088-mervinpraison-praisonai-path-traversal-in-custom-command","title":"MervinPraison PraisonAI path traversal in custom command templates","severity":"medium","exploited":false,"published_at":"2026-07-11T14:16:22.21+00:00","url":"https://junglewise.ai/threats/cve-2026-60088-mervinpraison-praisonai-path-traversal-in-custom-command"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"MervinPraison PraisonAI Agents","slug":"praisonai-agents","vulnerabilities":17,"url":"https://junglewise.ai/threats/technologies/praisonai-agents"},{"name":"MervinPraison Praisonaiagents","slug":"mervinpraison-praisonaiagents","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/mervinpraison-praisonaiagents"}],"technology":{"hub":true,"name":"MervinPraison PraisonAI","slug":"mervinpraison-praisonai","vendor":{"hub":true,"name":"MervinPraison","slug":"mervinpraison","url":"https://junglewise.ai/threats/vendors/mervinpraison"},"aliases":[],"category":"library","url":"https://junglewise.ai/threats/technologies/mervinpraison-praisonai"},"most_severe":[{"cve":"CVE-2026-61447","cvss":10,"epss":0.0249,"slug":"cve-2026-61447-mervinpraison-praisonai-remote-code-execution-in-codeagent","title":"MervinPraison PraisonAI remote code execution in CodeAgent","severity":"critical","exploited":false,"published_at":"2026-07-11T14:16:23.377+00:00","url":"https://junglewise.ai/threats/cve-2026-61447-mervinpraison-praisonai-remote-code-execution-in-codeagent"},{"cve":"CVE-2026-61445","cvss":9.9,"epss":0.0088,"slug":"cve-2026-61445-mervinpraison-praisonai-arbitrary-file-write-and-command","title":"MervinPraison PraisonAI arbitrary file write and command execution in AICoder","severity":"critical","exploited":false,"published_at":"2026-07-11T14:16:23.24+00:00","url":"https://junglewise.ai/threats/cve-2026-61445-mervinpraison-praisonai-arbitrary-file-write-and-command"},{"cve":"CVE-2026-60090","cvss":9.8,"epss":0.007,"slug":"cve-2026-60090-mervinpraison-praisonai-sql-and-cql-injection-in-knowledge-store","title":"MervinPraison PraisonAI SQL and CQL injection in knowledge-store backends","severity":"critical","exploited":false,"published_at":"2026-07-11T14:16:22.353+00:00","url":"https://junglewise.ai/threats/cve-2026-60090-mervinpraison-praisonai-sql-and-cql-injection-in-knowledge-store"},{"cve":"CVE-2026-40288","cvss":9.8,"epss":0.0061,"slug":"cve-2026-40288-mervinpraison-praisonai-rce-via-job-workflow-yaml","title":"MervinPraison PraisonAI RCE via job workflow YAML","severity":"critical","exploited":false,"published_at":"2026-04-14T04:17:12.21+00:00","url":"https://junglewise.ai/threats/cve-2026-40288-mervinpraison-praisonai-rce-via-job-workflow-yaml"},{"cve":"CVE-2026-40315","cvss":9.8,"epss":0.003,"slug":"cve-2026-40315-praisonai-sql-injection-in-sqliteconversationstore-table-prefix","title":"PraisonAI SQL injection in SQLiteConversationStore table_prefix","severity":"critical","exploited":false,"published_at":"2026-04-14T04:17:16.057+00:00","url":"https://junglewise.ai/threats/cve-2026-40315-praisonai-sql-injection-in-sqliteconversationstore-table-prefix"},{"cve":"CVE-2026-40088","cvss":9.6,"epss":0.0042,"slug":"cve-2026-40088-mervinpraison-praisonai-os-command-injection-in-execute-command","title":"MervinPraison PraisonAI OS command injection in execute_command","severity":"critical","exploited":false,"published_at":"2026-04-09T20:16:27.597+00:00","url":"https://junglewise.ai/threats/cve-2026-40088-mervinpraison-praisonai-os-command-injection-in-execute-command"},{"cve":"CVE-2026-40154","cvss":9.3,"epss":0.003,"slug":"cve-2026-40154-mervinpraison-praisonai-remote-code-execution-via-untrusted","title":"MervinPraison PraisonAI remote code execution via untrusted templates","severity":"critical","exploited":false,"published_at":"2026-04-09T22:16:36.503+00:00","url":"https://junglewise.ai/threats/cve-2026-40154-mervinpraison-praisonai-remote-code-execution-via-untrusted"},{"cve":"CVE-2026-61444","cvss":9.1,"epss":0.0057,"slug":"cve-2026-61444-mervinpraison-praisonai-code-injection-in-deploy-api-py","title":"MervinPraison PraisonAI code injection in deploy/api.py","severity":"critical","exploited":false,"published_at":"2026-07-10T15:16:50.61+00:00","url":"https://junglewise.ai/threats/cve-2026-61444-mervinpraison-praisonai-code-injection-in-deploy-api-py"},{"cve":"CVE-2026-40289","cvss":9.1,"epss":0.0042,"slug":"cve-2026-40289-praisonai-browser-server-session-hijacking-via-unauthenticated","title":"PraisonAI Browser Server session hijacking via unauthenticated WebSocket","severity":"critical","exploited":false,"published_at":"2026-04-14T04:17:12.71+00:00","url":"https://junglewise.ai/threats/cve-2026-40289-praisonai-browser-server-session-hijacking-via-unauthenticated"},{"cve":"CVE-2026-62176","cvss":9.1,"slug":"cve-2026-62176-praisonai-code-injection-via-f-string-interpolation-in-deploy-api","title":"PraisonAI code injection in deploy API server generation","severity":"critical","exploited":false,"published_at":"2026-10-07T16:05:53+00:00","url":"https://junglewise.ai/threats/cve-2026-62176-praisonai-code-injection-via-f-string-interpolation-in-deploy-api"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}