{"schema_version":1,"title":"MervinPraison PraisonAI Agents vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 25 vulnerabilities in MervinPraison PraisonAI Agents: 0 in the last 7 days and 6 in the last 90 days, 5 of them critical and 0 exploited in the wild. The most recent, CVE-2026-55528, was published on 25 August 2026.","url":"https://junglewise.ai/threats/technologies/praisonai-agents","json_url":"https://junglewise.ai/threats/technologies/praisonai-agents.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/praisonai-agents","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":13,"all_time":25,"critical":5,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":25},"latest":[{"cve":"CVE-2026-55528","cvss":8.2,"epss":0.0049,"slug":"cve-2026-55528-praisonai-agentserver-authentication-bypass-on-all-routes","title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token but AgentServer._creat","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:33.59+00:00","url":"https://junglewise.ai/threats/cve-2026-55528-praisonai-agentserver-authentication-bypass-on-all-routes"},{"cve":"CVE-2026-55526","cvss":8.5,"epss":0.0036,"slug":"cve-2026-55526-praisonai-ssrf-protection-bypass-in-spider-tools-via-dns","title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resolve ordinary hostname","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:33.3+00:00","url":"https://junglewise.ai/threats/cve-2026-55526-praisonai-ssrf-protection-bypass-in-spider-tools-via-dns"},{"cve":"CVE-2026-55524","cvss":7.5,"epss":0.0024,"slug":"cve-2026-55524-praisonai-agents-ssrf-in-web-crawl-tool-via-redirect-and-dns","title":"PraisonAI Agents SSRF in web_crawl tool via redirect and DNS rebinding","severity":"high","exploited":false,"published_at":"2026-08-25T14:43:19+00:00","url":"https://junglewise.ai/threats/cve-2026-55524-praisonai-agents-ssrf-in-web-crawl-tool-via-redirect-and-dns"},{"cve":"CVE-2026-47392","cvss":9.9,"epss":0.0088,"slug":"cve-2026-47392-mervinpraison-praisonai-sandbox-escape-in-execute-code-tool","title":"MervinPraison PraisonAI sandbox escape in execute_code tool","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:12.087+00:00","url":"https://junglewise.ai/threats/cve-2026-47392-mervinpraison-praisonai-sandbox-escape-in-execute-code-tool"},{"cve":"CVE-2026-47390","cvss":5.5,"slug":"cve-2026-47390-praisonai-ssrf-protection-bypass-in-spider-tools-via-loopback","title":"PraisonAI SSRF protection bypass in spider_tools via loopback encodings","severity":"medium","exploited":false,"published_at":"2026-07-21T16:17:11.76+00:00","url":"https://junglewise.ai/threats/cve-2026-47390-praisonai-ssrf-protection-bypass-in-spider-tools-via-loopback"},{"cve":"CVE-2026-60089","cvss":5.5,"slug":"cve-2026-60089-mervinpraison-praisonai-path-traversal-via-config-toml","title":"MervinPraison PraisonAI path traversal via config.toml","severity":"medium","exploited":false,"published_at":"2026-07-10T15:16:49.567+00:00","url":"https://junglewise.ai/threats/cve-2026-60089-mervinpraison-praisonai-path-traversal-via-config-toml"},{"cvss":8.8,"slug":"praisonai-path-traversal-and-memory-leakage-in-multiagent-context-e0324418","title":"PraisonAI path traversal and memory leakage in MultiAgent context handling","severity":"high","exploited":false,"published_at":"2026-06-19T00:31:37+00:00","url":"https://junglewise.ai/threats/praisonai-path-traversal-and-memory-leakage-in-multiagent-context-e0324418"},{"cve":"CVE-2026-56078","cvss":8.8,"epss":0.0092,"slug":"cve-2026-56078-mervinpraison-praisonai-path-traversal-in-multiagentmonitor","title":"MervinPraison PraisonAI path traversal in MultiAgentMonitor","severity":"high","exploited":false,"published_at":"2026-06-18T23:16:19.76+00:00","url":"https://junglewise.ai/threats/cve-2026-56078-mervinpraison-praisonai-path-traversal-in-multiagentmonitor"},{"cve":"CVE-2026-56074","cvss":5.5,"epss":0.0017,"slug":"cve-2026-56074-mervinpraison-praisonai-tool-approval-cache-bypass-in","title":"MervinPraison PraisonAI tool approval cache bypass in praisonaiagents","severity":"medium","exploited":false,"published_at":"2026-06-18T23:16:19.213+00:00","url":"https://junglewise.ai/threats/cve-2026-56074-mervinpraison-praisonai-tool-approval-cache-bypass-in"},{"cvss":8.8,"slug":"praisonai-ssrf-in-searxng-and-search-web-tools-deaf368b","title":"PraisonAI SSRF in SearxNG and search_web tools","severity":"high","exploited":false,"published_at":"2026-06-18T14:27:12+00:00","url":"https://junglewise.ai/threats/praisonai-ssrf-in-searxng-and-search-web-tools-deaf368b"},{"cvss":8.1,"slug":"mervinpraison-praisonai-imap-command-injection-in-email-tools-544d8891","title":"MervinPraison PraisonAI IMAP command injection in email_tools","severity":"high","exploited":false,"published_at":"2026-06-18T14:25:03+00:00","url":"https://junglewise.ai/threats/mervinpraison-praisonai-imap-command-injection-in-email-tools-544d8891"},{"cvss":8.5,"slug":"mervinpraison-praisonai-ssrf-via-dns-resolution-bypass-in-spidertools-6c7817aa","title":"MervinPraison PraisonAI SSRF via DNS Resolution Bypass in SpiderTools","severity":"high","exploited":false,"published_at":"2026-06-18T13:56:46+00:00","url":"https://junglewise.ai/threats/mervinpraison-praisonai-ssrf-via-dns-resolution-bypass-in-spidertools-6c7817aa"},{"cvss":9.8,"slug":"praisonai-unauthenticated-rce-via-jobs-api-and-approval-bypass-e2738d33","title":"PraisonAI unauthenticated RCE via Jobs API and approval bypass","severity":"critical","exploited":false,"published_at":"2026-06-18T13:56:35+00:00","url":"https://junglewise.ai/threats/praisonai-unauthenticated-rce-via-jobs-api-and-approval-bypass-e2738d33"},{"cvss":6.5,"slug":"mervinpraison-praisonai-sandbox-bypass-in-execute-code-tool-7ab9ccd2","title":"MervinPraison PraisonAI sandbox bypass in execute_code tool","severity":"medium","exploited":false,"published_at":"2026-06-18T13:55:29+00:00","url":"https://junglewise.ai/threats/mervinpraison-praisonai-sandbox-bypass-in-execute-code-tool-7ab9ccd2"},{"cvss":8.3,"slug":"praisonai-toolsmcpserver-dns-rebinding-in-legacy-sse-transport-b7f2d4d9","title":"PraisonAI ToolsMCPServer DNS rebinding in legacy SSE transport","severity":"high","exploited":false,"published_at":"2026-06-18T13:52:40+00:00","url":"https://junglewise.ai/threats/praisonai-toolsmcpserver-dns-rebinding-in-legacy-sse-transport-b7f2d4d9"},{"cve":"CVE-2026-44335","cvss":9.8,"epss":0.0057,"slug":"cve-2026-44335-mervinpraison-praisonai-ssrf-bypass-in-url-validation","title":"MervinPraison PraisonAI SSRF bypass in URL validation","severity":"critical","exploited":false,"published_at":"2026-05-06T22:08:11+00:00","url":"https://junglewise.ai/threats/cve-2026-44335-mervinpraison-praisonai-ssrf-bypass-in-url-validation"},{"cvss":5.5,"slug":"mervinpraison-praisonai-authorization-bypass-in-tool-approval-system-d872107a","title":"MervinPraison PraisonAI authorization bypass in tool approval system","severity":"medium","exploited":false,"published_at":"2026-04-10T19:28:38+00:00","url":"https://junglewise.ai/threats/mervinpraison-praisonai-authorization-bypass-in-tool-approval-system-d872107a"},{"cvss":8.1,"slug":"mervinpraison-praisonai-cross-origin-agent-execution-in-agui-endpoint-09843e16","title":"MervinPraison PraisonAI cross-origin agent execution in AGUI endpoint","severity":"high","exploited":false,"published_at":"2026-04-10T19:28:23+00:00","url":"https://junglewise.ai/threats/mervinpraison-praisonai-cross-origin-agent-execution-in-agui-endpoint-09843e16"},{"cve":"CVE-2026-40152","cvss":5.3,"epss":0.004,"slug":"cve-2026-40152-mervinpraison-praisonaiagents-path-traversal-in-list-files-tool","title":"MervinPraison PraisonAIAgents path traversal in list_files tool","severity":"medium","exploited":false,"published_at":"2026-04-10T19:24:32+00:00","url":"https://junglewise.ai/threats/cve-2026-40152-mervinpraison-praisonaiagents-path-traversal-in-list-files-tool"},{"cve":"CVE-2026-40153","cvss":7.4,"epss":0.0039,"slug":"cve-2026-40153-mervinpraison-praisonaiagents-environment-variable-exfiltration","title":"MervinPraison PraisonAIAgents environment variable exfiltration in shell tool","severity":"high","exploited":false,"published_at":"2026-04-10T19:24:27+00:00","url":"https://junglewise.ai/threats/cve-2026-40153-mervinpraison-praisonaiagents-environment-variable-exfiltration"},{"cve":"CVE-2026-40150","cvss":7.7,"epss":0.0038,"slug":"cve-2026-40150-mervinpraison-praisonaiagents-ssrf-and-local-file-read-in-web","title":"MervinPraison PraisonAIAgents SSRF and Local File Read in web_crawl tool","severity":"high","exploited":false,"published_at":"2026-04-10T19:23:57+00:00","url":"https://junglewise.ai/threats/cve-2026-40150-mervinpraison-praisonaiagents-ssrf-and-local-file-read-in-web"},{"cve":"CVE-2026-40117","cvss":6.2,"epss":0.0033,"slug":"cve-2026-40117-mervinpraison-praisonaiagents-arbitrary-file-read-in-read-skill","title":"MervinPraison PraisonAIAgents arbitrary file read in read_skill_file","severity":"medium","exploited":false,"published_at":"2026-04-10T19:23:21+00:00","url":"https://junglewise.ai/threats/cve-2026-40117-mervinpraison-praisonaiagents-arbitrary-file-read-in-read-skill"},{"cve":"CVE-2026-40111","cvss":4,"epss":0.0034,"slug":"cve-2026-40111-mervinpraison-praisonaiagents-os-command-injection-in-memory","title":"MervinPraison PraisonAIAgents OS command injection in Memory Hooks Executor","severity":"critical","exploited":false,"published_at":"2026-04-10T19:21:54+00:00","url":"https://junglewise.ai/threats/cve-2026-40111-mervinpraison-praisonaiagents-os-command-injection-in-memory"},{"cve":"CVE-2026-40160","cvss":6.5,"epss":0.004,"slug":"cve-2026-40160-mervinpraison-praisonaiagents-ssrf-in-web-crawl-tool","title":"MervinPraison PraisonAIAgents SSRF in web_crawl tool","severity":"high","exploited":false,"published_at":"2026-04-10T17:17:13.95+00:00","url":"https://junglewise.ai/threats/cve-2026-40160-mervinpraison-praisonaiagents-ssrf-in-web-crawl-tool"},{"cve":"CVE-2026-39888","cvss":9.9,"epss":0.0061,"slug":"cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code","title":"PraisonAI sandbox escape via frame traversal in execute_code","severity":"critical","exploited":false,"published_at":"2026-04-08T21:17:00.99+00:00","url":"https://junglewise.ai/threats/cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"MervinPraison PraisonAI Agents","slug":"praisonai-agents","vendor":{"name":"MervinPraison","slug":"mervinpraison","url":"https://junglewise.ai/threats/vendors/mervinpraison"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/praisonai-agents"},"most_severe":[{"cve":"CVE-2026-47392","cvss":9.9,"epss":0.0088,"slug":"cve-2026-47392-mervinpraison-praisonai-sandbox-escape-in-execute-code-tool","title":"MervinPraison PraisonAI sandbox escape in execute_code tool","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:12.087+00:00","url":"https://junglewise.ai/threats/cve-2026-47392-mervinpraison-praisonai-sandbox-escape-in-execute-code-tool"},{"cve":"CVE-2026-39888","cvss":9.9,"epss":0.0061,"slug":"cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code","title":"PraisonAI sandbox escape via frame traversal in execute_code","severity":"critical","exploited":false,"published_at":"2026-04-08T21:17:00.99+00:00","url":"https://junglewise.ai/threats/cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code"},{"cve":"CVE-2026-44335","cvss":9.8,"epss":0.0057,"slug":"cve-2026-44335-mervinpraison-praisonai-ssrf-bypass-in-url-validation","title":"MervinPraison PraisonAI SSRF bypass in URL validation","severity":"critical","exploited":false,"published_at":"2026-05-06T22:08:11+00:00","url":"https://junglewise.ai/threats/cve-2026-44335-mervinpraison-praisonai-ssrf-bypass-in-url-validation"},{"cvss":9.8,"slug":"praisonai-unauthenticated-rce-via-jobs-api-and-approval-bypass-e2738d33","title":"PraisonAI unauthenticated RCE via Jobs API and approval bypass","severity":"critical","exploited":false,"published_at":"2026-06-18T13:56:35+00:00","url":"https://junglewise.ai/threats/praisonai-unauthenticated-rce-via-jobs-api-and-approval-bypass-e2738d33"},{"cve":"CVE-2026-40111","cvss":4,"epss":0.0034,"slug":"cve-2026-40111-mervinpraison-praisonaiagents-os-command-injection-in-memory","title":"MervinPraison PraisonAIAgents OS command injection in Memory Hooks Executor","severity":"critical","exploited":false,"published_at":"2026-04-10T19:21:54+00:00","url":"https://junglewise.ai/threats/cve-2026-40111-mervinpraison-praisonaiagents-os-command-injection-in-memory"},{"cve":"CVE-2026-56078","cvss":8.8,"epss":0.0092,"slug":"cve-2026-56078-mervinpraison-praisonai-path-traversal-in-multiagentmonitor","title":"MervinPraison PraisonAI path traversal in MultiAgentMonitor","severity":"high","exploited":false,"published_at":"2026-06-18T23:16:19.76+00:00","url":"https://junglewise.ai/threats/cve-2026-56078-mervinpraison-praisonai-path-traversal-in-multiagentmonitor"},{"cvss":8.8,"slug":"praisonai-path-traversal-and-memory-leakage-in-multiagent-context-e0324418","title":"PraisonAI path traversal and memory leakage in MultiAgent context handling","severity":"high","exploited":false,"published_at":"2026-06-19T00:31:37+00:00","url":"https://junglewise.ai/threats/praisonai-path-traversal-and-memory-leakage-in-multiagent-context-e0324418"},{"cvss":8.8,"slug":"praisonai-ssrf-in-searxng-and-search-web-tools-deaf368b","title":"PraisonAI SSRF in SearxNG and search_web tools","severity":"high","exploited":false,"published_at":"2026-06-18T14:27:12+00:00","url":"https://junglewise.ai/threats/praisonai-ssrf-in-searxng-and-search-web-tools-deaf368b"},{"cve":"CVE-2026-55526","cvss":8.5,"epss":0.0036,"slug":"cve-2026-55526-praisonai-ssrf-protection-bypass-in-spider-tools-via-dns","title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resolve ordinary hostname","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:33.3+00:00","url":"https://junglewise.ai/threats/cve-2026-55526-praisonai-ssrf-protection-bypass-in-spider-tools-via-dns"},{"cvss":8.5,"slug":"mervinpraison-praisonai-ssrf-via-dns-resolution-bypass-in-spidertools-6c7817aa","title":"MervinPraison PraisonAI SSRF via DNS Resolution Bypass in SpiderTools","severity":"high","exploited":false,"published_at":"2026-06-18T13:56:46+00:00","url":"https://junglewise.ai/threats/mervinpraison-praisonai-ssrf-via-dns-resolution-bypass-in-spidertools-6c7817aa"}],"generated_at":"2026-09-26T13:07:00.120236+00:00"}