{"schema_version":1,"title":"praisonai (PyPI) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 86 vulnerabilities in praisonai (PyPI): 0 in the last 7 days and 49 in the last 90 days, 22 of them critical and 0 exploited in the wild. The most recent, CVE-2026-57112, was published on 15 September 2026.","url":"https://junglewise.ai/threats/technologies/pypi-praisonai","json_url":"https://junglewise.ai/threats/technologies/pypi-praisonai.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/pypi-praisonai","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":32,"all_time":86,"critical":22,"exploited":0,"last_7_days":0,"last_30_days":10,"last_90_days":49,"last_365_days":86},"latest":[{"cve":"CVE-2026-57112","cvss":8.3,"epss":0.0022,"slug":"cve-2026-57112-praisonai-legacy-sse-endpoint-cors-and-authentication-bypass","title":"PraisonAI legacy SSE endpoint CORS and authentication bypass","severity":"high","exploited":false,"published_at":"2026-09-15T11:17:10.29+00:00","url":"https://junglewise.ai/threats/cve-2026-57112-praisonai-legacy-sse-endpoint-cors-and-authentication-bypass"},{"cve":"CVE-2026-57145","cvss":9.1,"epss":0.0054,"slug":"cve-2026-57145-praisonai-path-traversal-in-multiedit-tool","title":"PraisonAI path traversal in multiedit tool","severity":"critical","exploited":false,"published_at":"2026-09-14T16:17:15.017+00:00","url":"https://junglewise.ai/threats/cve-2026-57145-praisonai-path-traversal-in-multiedit-tool"},{"cve":"CVE-2026-57132","cvss":8.2,"epss":0.0051,"slug":"cve-2026-57132-praisonai-authentication-bypass-with-praisonai-call-auth-disabled","title":"PraisonAI authentication bypass with PRAISONAI_CALL_AUTH disabled","severity":"high","exploited":false,"published_at":"2026-09-14T16:17:14.86+00:00","url":"https://junglewise.ai/threats/cve-2026-57132-praisonai-authentication-bypass-with-praisonai-call-auth-disabled"},{"cve":"CVE-2026-57131","cvss":9.8,"epss":0.0097,"slug":"cve-2026-57131-praisonai-unauthenticated-api-access-to-jobs-endpoint","title":"PraisonAI unauthenticated API access to jobs endpoint","severity":"critical","exploited":false,"published_at":"2026-09-14T16:17:14.71+00:00","url":"https://junglewise.ai/threats/cve-2026-57131-praisonai-unauthenticated-api-access-to-jobs-endpoint"},{"cve":"CVE-2026-57127","cvss":9.8,"epss":0.009,"slug":"cve-2026-57127-praisonai-authentication-bypass-in-recipe-serve","title":"PraisonAI authentication bypass in recipe serve","severity":"critical","exploited":false,"published_at":"2026-09-14T16:17:13.557+00:00","url":"https://junglewise.ai/threats/cve-2026-57127-praisonai-authentication-bypass-in-recipe-serve"},{"cve":"CVE-2026-57124","cvss":9.8,"epss":0.0104,"slug":"cve-2026-57124-praisonai-unauthenticated-remote-code-execution-in-mcp-endpoint","title":"PraisonAI unauthenticated remote code execution in MCP endpoint","severity":"critical","exploited":false,"published_at":"2026-09-14T16:17:13.417+00:00","url":"https://junglewise.ai/threats/cve-2026-57124-praisonai-unauthenticated-remote-code-execution-in-mcp-endpoint"},{"cve":"CVE-2026-57122","cvss":8.6,"epss":0.0019,"slug":"cve-2026-57122-praisonai-webhook-authentication-bypass-in-whatsapp-and-linear","title":"PraisonAI webhook authentication bypass in WhatsApp and Linear handlers","severity":"high","exploited":false,"published_at":"2026-09-14T16:17:13.27+00:00","url":"https://junglewise.ai/threats/cve-2026-57122-praisonai-webhook-authentication-bypass-in-whatsapp-and-linear"},{"cve":"CVE-2026-57119","cvss":7.5,"epss":0.0053,"slug":"cve-2026-57119-praisonai-jobs-api-path-traversal","title":"PraisonAI Jobs API path traversal","severity":"high","exploited":false,"published_at":"2026-09-14T16:17:13.13+00:00","url":"https://junglewise.ai/threats/cve-2026-57119-praisonai-jobs-api-path-traversal"},{"cve":"CVE-2026-56839","cvss":7.3,"epss":0.0038,"slug":"cve-2026-56839-praisonai-path-traversal-in-code-tools-helpers","title":"PraisonAI path traversal in CODE_TOOLS helpers","severity":"high","exploited":false,"published_at":"2026-09-14T16:17:12.977+00:00","url":"https://junglewise.ai/threats/cve-2026-56839-praisonai-path-traversal-in-code-tools-helpers"},{"cve":"CVE-2026-57125","cvss":9.8,"epss":0.006,"slug":"cve-2026-57125-praisonai-unauthenticated-remote-code-execution-via-api-v1-runs","title":"PraisonAI unauthenticated remote code execution via /api/v1/runs","severity":"critical","exploited":false,"published_at":"2026-09-14T15:17:05.9+00:00","url":"https://junglewise.ai/threats/cve-2026-57125-praisonai-unauthenticated-remote-code-execution-via-api-v1-runs"},{"cve":"CVE-2026-55539","cvss":8.6,"epss":0.0057,"slug":"cve-2026-55539-praisonai-async-jobs-api-authentication-bypass","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API create_app function mounts /api/v1/runs without authenticat","severity":"high","exploited":false,"published_at":"2026-08-25T16:16:55.01+00:00","url":"https://junglewise.ai/threats/cve-2026-55539-praisonai-async-jobs-api-authentication-bypass"},{"cve":"CVE-2026-55536","cvss":9.1,"epss":0.0052,"slug":"cve-2026-55536-praisonai-browser-server-websocket-origin-validation-bypass","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks Chrome extension origins with","severity":"critical","exploited":false,"published_at":"2026-08-25T16:16:54.867+00:00","url":"https://junglewise.ai/threats/cve-2026-55536-praisonai-browser-server-websocket-origin-validation-bypass"},{"cve":"CVE-2026-55533","cvss":8.2,"epss":0.0049,"slug":"cve-2026-55533-praisonai-recipe-server-authentication-bypass-with-missing","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, create_auth_middleware() allows requests when auth=api-key lacks PRAISON","severity":"high","exploited":false,"published_at":"2026-08-25T16:16:54.723+00:00","url":"https://junglewise.ai/threats/cve-2026-55533-praisonai-recipe-server-authentication-bypass-with-missing"},{"cve":"CVE-2026-55532","cvss":7.6,"epss":0.002,"slug":"cve-2026-55532-praisonai-origin-validation-bypass-enabling-csrf","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, MCP HTTP Stream _validate_origin uses request_origin.startswith(allowed)","severity":"high","exploited":false,"published_at":"2026-08-25T16:16:54.56+00:00","url":"https://junglewise.ai/threats/cve-2026-55532-praisonai-origin-validation-bypass-enabling-csrf"},{"cve":"CVE-2026-55541","cvss":4,"epss":0.0048,"slug":"cve-2026-55541-praisonai-authentication-bypass-in-serve-command","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve unified parse --api-key but _","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:34.887+00:00","url":"https://junglewise.ai/threats/cve-2026-55541-praisonai-authentication-bypass-in-serve-command"},{"cve":"CVE-2026-55540","cvss":7.1,"epss":0.0039,"slug":"cve-2026-55540-praisonai-path-traversal-via-symlinks-and-unvalidated-working","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, is_path_within_directory() uses os.path.abspath() rather than os.path.re","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:34.74+00:00","url":"https://junglewise.ai/threats/cve-2026-55540-praisonai-path-traversal-via-symlinks-and-unvalidated-working"},{"cve":"CVE-2026-55538","cvss":7.3,"epss":0.0045,"slug":"cve-2026-55538-praisonai-agent-invocation-auth-bypass-via-missing-api-key","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, praisonai serve agents parses config[\"api_key\"] but _create_agents_app()","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:34.597+00:00","url":"https://junglewise.ai/threats/cve-2026-55538-praisonai-agent-invocation-auth-bypass-via-missing-api-key"},{"cve":"CVE-2026-55537","cvss":7.1,"epss":0.0027,"slug":"cve-2026-55537-praisonai-webhook-ssrf-via-dns-fail-open-and-toctou","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webhook_url when resolut","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:34.45+00:00","url":"https://junglewise.ai/threats/cve-2026-55537-praisonai-webhook-ssrf-via-dns-fail-open-and-toctou"},{"cve":"CVE-2026-55535","cvss":6.8,"epss":0.0034,"slug":"cve-2026-55535-praisonai-server-side-request-forgery-in-webhook-url-validation","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror a","severity":"medium","exploited":false,"published_at":"2026-08-25T15:16:34.307+00:00","url":"https://junglewise.ai/threats/cve-2026-55535-praisonai-server-side-request-forgery-in-webhook-url-validation"},{"cve":"CVE-2026-55534","cvss":8.6,"epss":0.0045,"slug":"cve-2026-55534-praisonai-serve-agents-authentication-bypass","title":"PraisonAI is a multi-agent teams system. From praisonai 4.6.34 until 4.6.58, praisonai serve agents accepts --api-key but _create_agents_app","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:34.167+00:00","url":"https://junglewise.ai/threats/cve-2026-55534-praisonai-serve-agents-authentication-bypass"},{"cve":"CVE-2026-55531","cvss":6.5,"epss":0.0045,"slug":"cve-2026-55531-praisonai-mcp-http-server-memory-exhaustion-via-unbounded-session","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream mcp_post handler creates a new _sessions entry for e","severity":"medium","exploited":false,"published_at":"2026-08-25T15:16:34.017+00:00","url":"https://junglewise.ai/threats/cve-2026-55531-praisonai-mcp-http-server-memory-exhaustion-via-unbounded-session"},{"cve":"CVE-2026-55529","cvss":6.9,"epss":0.0018,"slug":"cve-2026-55529-praisonai-mcp-http-stream-origin-validation-bypass","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream _validate_origin method accepts request_origin.start","severity":"medium","exploited":false,"published_at":"2026-08-25T15:16:33.727+00:00","url":"https://junglewise.ai/threats/cve-2026-55529-praisonai-mcp-http-stream-origin-validation-bypass"},{"cve":"CVE-2026-55522","cvss":7.8,"epss":0.0022,"slug":"cve-2026-55522-praisonai-workflow-include-remote-code-execution-in-tools-py","title":"PraisonAI workflow include remote code execution in tools.py","severity":"high","exploited":false,"published_at":"2026-08-25T14:15:27+00:00","url":"https://junglewise.ai/threats/cve-2026-55522-praisonai-workflow-include-remote-code-execution-in-tools-py"},{"cve":"CVE-2026-57144","cvss":3.1,"slug":"cve-2026-57144-praisonai-sandlocksandbox-falls-back-to-unrestricted-subprocess","title":"PYSEC-2026-3504 - PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable","severity":"low","exploited":false,"published_at":"2026-07-23T11:41:44.400261+00:00","url":"https://junglewise.ai/threats/cve-2026-57144-praisonai-sandlocksandbox-falls-back-to-unrestricted-subprocess"},{"cve":"CVE-2026-57146","cvss":3.1,"slug":"cve-2026-57146-praisonai-a2u-incomplete-authentication-fix-leaves-current-serve","title":"PYSEC-2026-3515 - PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default","severity":"low","exploited":false,"published_at":"2026-07-23T11:41:42.9746+00:00","url":"https://junglewise.ai/threats/cve-2026-57146-praisonai-a2u-incomplete-authentication-fix-leaves-current-serve"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-20","critical":4,"exploited":0,"vulnerabilities":23},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":1,"exploited":0,"vulnerabilities":13},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":5,"exploited":0,"vulnerabilities":10},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"tensorflow (PyPI)","slug":"pypi-tensorflow","vulnerabilities":428,"url":"https://junglewise.ai/threats/technologies/pypi-tensorflow"},{"name":"tensorflow-cpu (PyPI)","slug":"tensorflow-cpu","vulnerabilities":424,"url":"https://junglewise.ai/threats/technologies/tensorflow-cpu"},{"name":"tensorflow-gpu (PyPI)","slug":"tensorflow-gpu","vulnerabilities":421,"url":"https://junglewise.ai/threats/technologies/tensorflow-gpu"},{"name":"open-webui (PyPI)","slug":"open-webui","vulnerabilities":177,"url":"https://junglewise.ai/threats/technologies/open-webui"},{"name":"Django (PyPI)","slug":"django","vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/django"},{"name":"apache-airflow (PyPI)","slug":"apache-airflow","vulnerabilities":152,"url":"https://junglewise.ai/threats/technologies/apache-airflow"},{"name":"plone (PyPI)","slug":"pypi-plone","vulnerabilities":101,"url":"https://junglewise.ai/threats/technologies/pypi-plone"},{"name":"exiv2 (PyPI)","slug":"exiv2","vulnerabilities":85,"url":"https://junglewise.ai/threats/technologies/exiv2"},{"name":"nltk (PyPI)","slug":"nltk","vulnerabilities":83,"url":"https://junglewise.ai/threats/technologies/nltk"},{"name":"mlflow (PyPI)","slug":"mlflow","vulnerabilities":82,"url":"https://junglewise.ai/threats/technologies/mlflow"},{"name":"pillow (PyPI)","slug":"pillow","vulnerabilities":79,"url":"https://junglewise.ai/threats/technologies/pillow"},{"name":"picklescan (PyPI)","slug":"picklescan","vulnerabilities":78,"url":"https://junglewise.ai/threats/technologies/picklescan"}],"technology":{"hub":true,"name":"praisonai (PyPI)","slug":"pypi-praisonai","vendor":{"name":"PyPI","slug":"pypi","url":"https://junglewise.ai/threats/vendors/pypi"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/pypi-praisonai"},"most_severe":[{"cve":"CVE-2026-47392","cvss":9.9,"epss":0.0088,"slug":"cve-2026-47392-mervinpraison-praisonai-sandbox-escape-in-execute-code-tool","title":"MervinPraison PraisonAI sandbox escape in execute_code tool","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:12.087+00:00","url":"https://junglewise.ai/threats/cve-2026-47392-mervinpraison-praisonai-sandbox-escape-in-execute-code-tool"},{"cve":"CVE-2026-47391","cvss":9.8,"epss":0.0117,"slug":"cve-2026-47391-mervinpraison-praisonai-remote-code-execution-in-a2a-server","title":"MervinPraison PraisonAI remote code execution in A2A server example","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:11.92+00:00","url":"https://junglewise.ai/threats/cve-2026-47391-mervinpraison-praisonai-remote-code-execution-in-a2a-server"},{"cve":"CVE-2026-57124","cvss":9.8,"epss":0.0104,"slug":"cve-2026-57124-praisonai-unauthenticated-remote-code-execution-in-mcp-endpoint","title":"PraisonAI unauthenticated remote code execution in MCP endpoint","severity":"critical","exploited":false,"published_at":"2026-09-14T16:17:13.417+00:00","url":"https://junglewise.ai/threats/cve-2026-57124-praisonai-unauthenticated-remote-code-execution-in-mcp-endpoint"},{"cve":"CVE-2026-34935","cvss":9.8,"epss":0.0099,"slug":"cve-2026-34935-mervinpraison-praisonai-os-command-injection-in-mcphandler","title":"MervinPraison PraisonAI OS command injection in MCPHandler","severity":"critical","exploited":false,"published_at":"2026-04-03T23:17:05.693+00:00","url":"https://junglewise.ai/threats/cve-2026-34935-mervinpraison-praisonai-os-command-injection-in-mcphandler"},{"cve":"CVE-2026-57131","cvss":9.8,"epss":0.0097,"slug":"cve-2026-57131-praisonai-unauthenticated-api-access-to-jobs-endpoint","title":"PraisonAI unauthenticated API access to jobs endpoint","severity":"critical","exploited":false,"published_at":"2026-09-14T16:17:14.71+00:00","url":"https://junglewise.ai/threats/cve-2026-57131-praisonai-unauthenticated-api-access-to-jobs-endpoint"},{"cve":"CVE-2026-40288","cvss":9.8,"epss":0.0093,"slug":"cve-2026-40288-mervinpraison-praisonai-rce-via-job-workflow-yaml","title":"MervinPraison PraisonAI RCE via job workflow YAML","severity":"critical","exploited":false,"published_at":"2026-04-10T19:32:48+00:00","url":"https://junglewise.ai/threats/cve-2026-40288-mervinpraison-praisonai-rce-via-job-workflow-yaml"},{"cve":"CVE-2026-57127","cvss":9.8,"epss":0.009,"slug":"cve-2026-57127-praisonai-authentication-bypass-in-recipe-serve","title":"PraisonAI authentication bypass in recipe serve","severity":"critical","exploited":false,"published_at":"2026-09-14T16:17:13.557+00:00","url":"https://junglewise.ai/threats/cve-2026-57127-praisonai-authentication-bypass-in-recipe-serve"},{"cve":"CVE-2026-39890","cvss":9.8,"epss":0.0081,"slug":"cve-2026-39890-mervinpraison-praisonai-rce-via-yaml-deserialization-in","title":"MervinPraison PraisonAI RCE via YAML deserialization in AgentService","severity":"critical","exploited":false,"published_at":"2026-04-08T21:17:01.267+00:00","url":"https://junglewise.ai/threats/cve-2026-39890-mervinpraison-praisonai-rce-via-yaml-deserialization-in"},{"cve":"CVE-2026-47393","cvss":9.8,"epss":0.0078,"slug":"cve-2026-47393-mervinpraison-praisonai-missing-authentication-in-generated-api","title":"MervinPraison PraisonAI missing authentication in generated API server","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:12.27+00:00","url":"https://junglewise.ai/threats/cve-2026-47393-mervinpraison-praisonai-missing-authentication-in-generated-api"},{"cve":"CVE-2026-41497","cvss":9.8,"epss":0.0077,"slug":"cve-2026-41497-praisonai-has-an-incomplete-fix-for-os-command-injection","title":"PraisonAI has an incomplete fix for - OS Command Injection","severity":"critical","exploited":false,"published_at":"2026-04-17T22:23:50+00:00","url":"https://junglewise.ai/threats/cve-2026-41497-praisonai-has-an-incomplete-fix-for-os-command-injection"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}