{"schema_version":1,"title":"Praisonaiagents vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Praisonaiagents: 0 in the last 7 days and 1 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-61437, was published on 10 July 2026.","url":"https://junglewise.ai/threats/technologies/praisonaiagents","json_url":"https://junglewise.ai/threats/technologies/praisonaiagents.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/praisonaiagents","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":6,"all_time":13,"critical":4,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":1,"last_365_days":13},"latest":[{"cve":"CVE-2026-61437","cvss":7.8,"slug":"cve-2026-61437-praisonai-unsafe-dynamic-module-loading-in-agentflow","title":"PraisonAI unsafe dynamic module loading in AgentFlow","severity":"high","exploited":false,"published_at":"2026-07-10T15:16:50.35+00:00","url":"https://junglewise.ai/threats/cve-2026-61437-praisonai-unsafe-dynamic-module-loading-in-agentflow"},{"cvss":5.5,"slug":"praisonai-tool-approval-cache-bypass-in-shell-command-execution-2123e935","title":"PraisonAI tool approval cache bypass in shell command execution","severity":"medium","exploited":false,"published_at":"2026-06-19T00:31:37+00:00","url":"https://junglewise.ai/threats/praisonai-tool-approval-cache-bypass-in-shell-command-execution-2123e935"},{"cve":"CVE-2026-56076","cvss":8.1,"slug":"cve-2026-56076-praisonai-cross-origin-agent-execution-in-agui-endpoint","title":"PraisonAI cross-origin agent execution in AGUI endpoint","severity":"high","exploited":false,"published_at":"2026-06-18T23:16:19.49+00:00","url":"https://junglewise.ai/threats/cve-2026-56076-praisonai-cross-origin-agent-execution-in-agui-endpoint"},{"cvss":9.8,"slug":"praisonai-agentteam-missing-authentication-in-launch-endpoints-b4185bec","title":"PraisonAI AgentTeam missing authentication in launch endpoints","severity":"critical","exploited":false,"published_at":"2026-06-18T13:57:32+00:00","url":"https://junglewise.ai/threats/praisonai-agentteam-missing-authentication-in-launch-endpoints-b4185bec"},{"cvss":7.5,"slug":"praisonai-arbitrary-file-read-via-path-traversal-in-mentionsparser-7ae625c2","title":"PraisonAI arbitrary file read via path traversal in MentionsParser","severity":"high","exploited":false,"published_at":"2026-06-18T13:57:00+00:00","url":"https://junglewise.ai/threats/praisonai-arbitrary-file-read-via-path-traversal-in-mentionsparser-7ae625c2"},{"cvss":9.8,"slug":"praisonai-praisonaiagents-missing-authentication-in-mcp-sse-transport-1487978c","title":"PraisonAI praisonaiagents missing authentication in MCP SSE transport","severity":"critical","exploited":false,"published_at":"2026-06-18T13:55:54+00:00","url":"https://junglewise.ai/threats/praisonai-praisonaiagents-missing-authentication-in-mcp-sse-transport-1487978c"},{"cvss":6.5,"slug":"praisonai-spidertools-ssrf-protection-bypass-via-redirects-8e7f8982","title":"PraisonAI SpiderTools SSRF protection bypass via redirects","severity":"medium","exploited":false,"published_at":"2026-06-18T13:55:14+00:00","url":"https://junglewise.ai/threats/praisonai-spidertools-ssrf-protection-bypass-via-redirects-8e7f8982"},{"cvss":4.3,"slug":"praisonai-unauthenticated-event-injection-in-sse-server-afacaac8","title":"PraisonAI unauthenticated event injection in SSE server","severity":"medium","exploited":false,"published_at":"2026-06-18T13:52:13+00:00","url":"https://junglewise.ai/threats/praisonai-unauthenticated-event-injection-in-sse-server-afacaac8"},{"cve":"CVE-2026-40160","cvss":6.5,"epss":0.004,"slug":"cve-2026-40160-mervinpraison-praisonaiagents-ssrf-in-web-crawl-tool","title":"MervinPraison PraisonAIAgents SSRF in web_crawl tool","severity":"high","exploited":false,"published_at":"2026-04-10T17:17:13.95+00:00","url":"https://junglewise.ai/threats/cve-2026-40160-mervinpraison-praisonaiagents-ssrf-in-web-crawl-tool"},{"cve":"CVE-2026-39888","cvss":9.9,"epss":0.0061,"slug":"cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code","title":"PraisonAI sandbox escape via frame traversal in execute_code","severity":"critical","exploited":false,"published_at":"2026-04-08T21:17:00.99+00:00","url":"https://junglewise.ai/threats/cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code"},{"cve":"CVE-2026-34954","cvss":8.6,"epss":0.0041,"slug":"cve-2026-34954-mervinpraison-praisonai-ssrf-in-filetools-download-file","title":"MervinPraison PraisonAI SSRF in FileTools.download_file","severity":"high","exploited":false,"published_at":"2026-04-03T23:17:06.81+00:00","url":"https://junglewise.ai/threats/cve-2026-34954-mervinpraison-praisonai-ssrf-in-filetools-download-file"},{"cve":"CVE-2026-34938","cvss":10,"epss":0.0084,"slug":"cve-2026-34938-mervinpraison-praisonai-sandbox-escape-in-execute-code","title":"MervinPraison PraisonAI sandbox escape in execute_code","severity":"critical","exploited":false,"published_at":"2026-04-03T23:17:06.17+00:00","url":"https://junglewise.ai/threats/cve-2026-34938-mervinpraison-praisonai-sandbox-escape-in-execute-code"},{"cve":"CVE-2026-34937","cvss":7.8,"epss":0.0063,"slug":"cve-2026-34937-mervinpraison-praisonai-os-command-injection-in-run-python","title":"MervinPraison PraisonAI OS command injection in run_python","severity":"high","exploited":false,"published_at":"2026-04-03T23:17:06.02+00:00","url":"https://junglewise.ai/threats/cve-2026-34937-mervinpraison-praisonai-os-command-injection-in-run-python"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"PraisonAI","slug":"praisonai","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/praisonai"}],"technology":{"hub":true,"name":"Praisonaiagents","slug":"praisonaiagents","vendor":{"name":"Praison","slug":"praison","url":"https://junglewise.ai/threats/vendors/praison"},"aliases":[],"category":"library","homepage":"https://docs.praison.ai/","repo_url":"https://github.com/MervinPraison/PraisonAI","description":"A framework for creating and managing AI agents and multi-agent systems.","url":"https://junglewise.ai/threats/technologies/praisonaiagents"},"most_severe":[{"cve":"CVE-2026-34938","cvss":10,"epss":0.0084,"slug":"cve-2026-34938-mervinpraison-praisonai-sandbox-escape-in-execute-code","title":"MervinPraison PraisonAI sandbox escape in execute_code","severity":"critical","exploited":false,"published_at":"2026-04-03T23:17:06.17+00:00","url":"https://junglewise.ai/threats/cve-2026-34938-mervinpraison-praisonai-sandbox-escape-in-execute-code"},{"cve":"CVE-2026-39888","cvss":9.9,"epss":0.0061,"slug":"cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code","title":"PraisonAI sandbox escape via frame traversal in execute_code","severity":"critical","exploited":false,"published_at":"2026-04-08T21:17:00.99+00:00","url":"https://junglewise.ai/threats/cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code"},{"cvss":9.8,"slug":"praisonai-agentteam-missing-authentication-in-launch-endpoints-b4185bec","title":"PraisonAI AgentTeam missing authentication in launch endpoints","severity":"critical","exploited":false,"published_at":"2026-06-18T13:57:32+00:00","url":"https://junglewise.ai/threats/praisonai-agentteam-missing-authentication-in-launch-endpoints-b4185bec"},{"cvss":9.8,"slug":"praisonai-praisonaiagents-missing-authentication-in-mcp-sse-transport-1487978c","title":"PraisonAI praisonaiagents missing authentication in MCP SSE transport","severity":"critical","exploited":false,"published_at":"2026-06-18T13:55:54+00:00","url":"https://junglewise.ai/threats/praisonai-praisonaiagents-missing-authentication-in-mcp-sse-transport-1487978c"},{"cve":"CVE-2026-34954","cvss":8.6,"epss":0.0041,"slug":"cve-2026-34954-mervinpraison-praisonai-ssrf-in-filetools-download-file","title":"MervinPraison PraisonAI SSRF in FileTools.download_file","severity":"high","exploited":false,"published_at":"2026-04-03T23:17:06.81+00:00","url":"https://junglewise.ai/threats/cve-2026-34954-mervinpraison-praisonai-ssrf-in-filetools-download-file"},{"cve":"CVE-2026-56076","cvss":8.1,"slug":"cve-2026-56076-praisonai-cross-origin-agent-execution-in-agui-endpoint","title":"PraisonAI cross-origin agent execution in AGUI endpoint","severity":"high","exploited":false,"published_at":"2026-06-18T23:16:19.49+00:00","url":"https://junglewise.ai/threats/cve-2026-56076-praisonai-cross-origin-agent-execution-in-agui-endpoint"},{"cve":"CVE-2026-34937","cvss":7.8,"epss":0.0063,"slug":"cve-2026-34937-mervinpraison-praisonai-os-command-injection-in-run-python","title":"MervinPraison PraisonAI OS command injection in run_python","severity":"high","exploited":false,"published_at":"2026-04-03T23:17:06.02+00:00","url":"https://junglewise.ai/threats/cve-2026-34937-mervinpraison-praisonai-os-command-injection-in-run-python"},{"cve":"CVE-2026-61437","cvss":7.8,"slug":"cve-2026-61437-praisonai-unsafe-dynamic-module-loading-in-agentflow","title":"PraisonAI unsafe dynamic module loading in AgentFlow","severity":"high","exploited":false,"published_at":"2026-07-10T15:16:50.35+00:00","url":"https://junglewise.ai/threats/cve-2026-61437-praisonai-unsafe-dynamic-module-loading-in-agentflow"},{"cvss":7.5,"slug":"praisonai-arbitrary-file-read-via-path-traversal-in-mentionsparser-7ae625c2","title":"PraisonAI arbitrary file read via path traversal in MentionsParser","severity":"high","exploited":false,"published_at":"2026-06-18T13:57:00+00:00","url":"https://junglewise.ai/threats/praisonai-arbitrary-file-read-via-path-traversal-in-mentionsparser-7ae625c2"},{"cve":"CVE-2026-40160","cvss":6.5,"epss":0.004,"slug":"cve-2026-40160-mervinpraison-praisonaiagents-ssrf-in-web-crawl-tool","title":"MervinPraison PraisonAIAgents SSRF in web_crawl tool","severity":"high","exploited":false,"published_at":"2026-04-10T17:17:13.95+00:00","url":"https://junglewise.ai/threats/cve-2026-40160-mervinpraison-praisonaiagents-ssrf-in-web-crawl-tool"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}