{"schema_version":1,"title":"praisonaiagents (PyPI) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 39 vulnerabilities in praisonaiagents (PyPI): 0 in the last 7 days and 21 in the last 90 days, 9 of them critical and 0 exploited in the wild. The most recent, CVE-2026-57112, was published on 15 September 2026.","url":"https://junglewise.ai/threats/technologies/pypi-praisonaiagents","json_url":"https://junglewise.ai/threats/technologies/pypi-praisonaiagents.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/pypi-praisonaiagents","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":20,"all_time":39,"critical":9,"exploited":0,"last_7_days":0,"last_30_days":9,"last_90_days":21,"last_365_days":39},"latest":[{"cve":"CVE-2026-57112","cvss":8.3,"epss":0.0022,"slug":"cve-2026-57112-praisonai-legacy-sse-endpoint-cors-and-authentication-bypass","title":"PraisonAI legacy SSE endpoint CORS and authentication bypass","severity":"high","exploited":false,"published_at":"2026-09-15T11:17:10.29+00:00","url":"https://junglewise.ai/threats/cve-2026-57112-praisonai-legacy-sse-endpoint-cors-and-authentication-bypass"},{"cve":"CVE-2026-57130","cvss":8.1,"epss":0.0046,"slug":"cve-2026-57130-praisonai-imap-injection-in-email-tools","title":"PraisonAI IMAP injection in email tools","severity":"high","exploited":false,"published_at":"2026-09-14T15:17:06.453+00:00","url":"https://junglewise.ai/threats/cve-2026-57130-praisonai-imap-injection-in-email-tools"},{"cve":"CVE-2026-57129","cvss":7.5,"epss":0.0053,"slug":"cve-2026-57129-praisonai-path-traversal-in-file-mention-parsing","title":"PraisonAI path traversal in file mention parsing","severity":"high","exploited":false,"published_at":"2026-09-14T15:17:06.317+00:00","url":"https://junglewise.ai/threats/cve-2026-57129-praisonai-path-traversal-in-file-mention-parsing"},{"cve":"CVE-2026-57128","cvss":4.3,"epss":0.0025,"slug":"cve-2026-57128-praisonai-authentication-bypass-in-sse-server-endpoints","title":"PraisonAI authentication bypass in SSE server endpoints","severity":"medium","exploited":false,"published_at":"2026-09-14T15:17:06.177+00:00","url":"https://junglewise.ai/threats/cve-2026-57128-praisonai-authentication-bypass-in-sse-server-endpoints"},{"cve":"CVE-2026-57126","cvss":8.5,"epss":0.0038,"slug":"cve-2026-57126-praisonai-spidertools-ssrf-bypass-via-dns-resolution","title":"PraisonAI SpiderTools SSRF bypass via DNS resolution","severity":"high","exploited":false,"published_at":"2026-09-14T15:17:06.04+00:00","url":"https://junglewise.ai/threats/cve-2026-57126-praisonai-spidertools-ssrf-bypass-via-dns-resolution"},{"cve":"CVE-2026-57125","cvss":9.8,"epss":0.006,"slug":"cve-2026-57125-praisonai-unauthenticated-remote-code-execution-via-api-v1-runs","title":"PraisonAI unauthenticated remote code execution via /api/v1/runs","severity":"critical","exploited":false,"published_at":"2026-09-14T15:17:05.9+00:00","url":"https://junglewise.ai/threats/cve-2026-57125-praisonai-unauthenticated-remote-code-execution-via-api-v1-runs"},{"cve":"CVE-2026-57123","cvss":9.8,"epss":0.009,"slug":"cve-2026-57123-praisonai-tools-mcp-server-authentication-bypass","title":"PraisonAI Tools MCP Server authentication bypass","severity":"critical","exploited":false,"published_at":"2026-09-14T15:17:05.753+00:00","url":"https://junglewise.ai/threats/cve-2026-57123-praisonai-tools-mcp-server-authentication-bypass"},{"cve":"CVE-2026-57120","cvss":6.5,"epss":0.0056,"slug":"cve-2026-57120-praisonai-execute-code-sandbox-bypass-via-string-format-injection","title":"PraisonAI execute_code sandbox bypass via string format injection","severity":"medium","exploited":false,"published_at":"2026-09-14T15:17:05.607+00:00","url":"https://junglewise.ai/threats/cve-2026-57120-praisonai-execute-code-sandbox-bypass-via-string-format-injection"},{"cve":"CVE-2026-57115","cvss":6.5,"epss":0.0043,"slug":"cve-2026-57115-praisonai-spidertools-redirect-validation-bypass","title":"PraisonAI SpiderTools redirect validation bypass","severity":"medium","exploited":false,"published_at":"2026-09-14T15:17:05.45+00:00","url":"https://junglewise.ai/threats/cve-2026-57115-praisonai-spidertools-redirect-validation-bypass"},{"cve":"CVE-2026-55530","cvss":6.1,"epss":0.0017,"slug":"cve-2026-55530-praisonai-ast-grep-rewrite-missing-authorization-in-file","title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, ast_grep_rewrite lacks the @require_approval decorator used by sib","severity":"medium","exploited":false,"published_at":"2026-08-25T15:16:33.87+00:00","url":"https://junglewise.ai/threats/cve-2026-55530-praisonai-ast-grep-rewrite-missing-authorization-in-file"},{"cve":"CVE-2026-55528","cvss":8.2,"epss":0.0049,"slug":"cve-2026-55528-praisonai-agentserver-authentication-bypass-on-all-routes","title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token but AgentServer._creat","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:33.59+00:00","url":"https://junglewise.ai/threats/cve-2026-55528-praisonai-agentserver-authentication-bypass-on-all-routes"},{"cve":"CVE-2026-55527","cvss":7.1,"epss":0.0048,"slug":"cve-2026-55527-praisonaiagents-filememory-path-traversal-arbitrary-file-write","title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the FileMemory constructor joins unsanitized user_id into self.use","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:33.443+00:00","url":"https://junglewise.ai/threats/cve-2026-55527-praisonaiagents-filememory-path-traversal-arbitrary-file-write"},{"cve":"CVE-2026-55526","cvss":8.5,"epss":0.0036,"slug":"cve-2026-55526-praisonai-ssrf-protection-bypass-in-spider-tools-via-dns","title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resolve ordinary hostname","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:33.3+00:00","url":"https://junglewise.ai/threats/cve-2026-55526-praisonai-ssrf-protection-bypass-in-spider-tools-via-dns"},{"cve":"CVE-2026-55524","cvss":7.5,"epss":0.0024,"slug":"cve-2026-55524-praisonai-agents-ssrf-in-web-crawl-tool-via-redirect-and-dns","title":"PraisonAI Agents SSRF in web_crawl tool via redirect and DNS rebinding","severity":"high","exploited":false,"published_at":"2026-08-25T14:43:19+00:00","url":"https://junglewise.ai/threats/cve-2026-55524-praisonai-agents-ssrf-in-web-crawl-tool-via-redirect-and-dns"},{"cve":"CVE-2026-55523","cvss":4,"epss":0.0047,"slug":"cve-2026-55523-praisonai-web-crawl-ssrf-protection-bypass-via-unchecked","title":"PraisonAI web_crawl SSRF protection bypass via unchecked redirects","severity":"high","exploited":false,"published_at":"2026-08-25T14:18:40+00:00","url":"https://junglewise.ai/threats/cve-2026-55523-praisonai-web-crawl-ssrf-protection-bypass-via-unchecked"},{"cve":"CVE-2026-55525","cvss":7.5,"epss":0.0051,"slug":"cve-2026-55525-praisonai-web-crawl-ssrf-via-redirect-following","title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the web_crawl function validates only the initial URL before _craw","severity":"high","exploited":false,"published_at":"2026-08-25T14:16:52.417+00:00","url":"https://junglewise.ai/threats/cve-2026-55525-praisonai-web-crawl-ssrf-via-redirect-following"},{"cve":"CVE-2026-55522","cvss":7.8,"epss":0.0022,"slug":"cve-2026-55522-praisonai-workflow-include-remote-code-execution-in-tools-py","title":"PraisonAI workflow include remote code execution in tools.py","severity":"high","exploited":false,"published_at":"2026-08-25T14:15:27+00:00","url":"https://junglewise.ai/threats/cve-2026-55522-praisonai-workflow-include-remote-code-execution-in-tools-py"},{"cve":"CVE-2026-57143","cvss":3.1,"slug":"cve-2026-57143-praisonai-server-side-request-forgery-ssrf-in-searxng-search-web","title":"PYSEC-2026-3530 - PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter","severity":"low","exploited":false,"published_at":"2026-07-23T11:41:43.208821+00:00","url":"https://junglewise.ai/threats/cve-2026-57143-praisonai-server-side-request-forgery-ssrf-in-searxng-search-web"},{"cve":"CVE-2026-57118","cvss":3.1,"slug":"cve-2026-57118-praisonai-agentteam-launch-exposes-unauthenticated-remote-agent","title":"PYSEC-2026-3537 - PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints","severity":"low","exploited":false,"published_at":"2026-07-23T11:41:42.003832+00:00","url":"https://junglewise.ai/threats/cve-2026-57118-praisonai-agentteam-launch-exposes-unauthenticated-remote-agent"},{"cve":"CVE-2026-47395","cvss":5.5,"epss":0.0018,"slug":"cve-2026-47395-mervinpraison-praisonai-ssrf-in-mentionsparser-url-expansion","title":"MervinPraison PraisonAI SSRF in MentionsParser URL expansion","severity":"medium","exploited":false,"published_at":"2026-07-21T16:17:12.6+00:00","url":"https://junglewise.ai/threats/cve-2026-47395-mervinpraison-praisonai-ssrf-in-mentionsparser-url-expansion"},{"cve":"CVE-2026-47392","cvss":9.9,"epss":0.0088,"slug":"cve-2026-47392-mervinpraison-praisonai-sandbox-escape-in-execute-code-tool","title":"MervinPraison PraisonAI sandbox escape in execute_code tool","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:12.087+00:00","url":"https://junglewise.ai/threats/cve-2026-47392-mervinpraison-praisonai-sandbox-escape-in-execute-code-tool"},{"cve":"CVE-2026-56078","cvss":8.8,"epss":0.0092,"slug":"cve-2026-56078-mervinpraison-praisonai-path-traversal-in-multiagentmonitor","title":"MervinPraison PraisonAI path traversal in MultiAgentMonitor","severity":"high","exploited":false,"published_at":"2026-06-18T23:16:19.76+00:00","url":"https://junglewise.ai/threats/cve-2026-56078-mervinpraison-praisonai-path-traversal-in-multiagentmonitor"},{"cve":"CVE-2026-56074","cvss":5.5,"epss":0.0017,"slug":"cve-2026-56074-mervinpraison-praisonai-tool-approval-cache-bypass-in","title":"MervinPraison PraisonAI tool approval cache bypass in praisonaiagents","severity":"medium","exploited":false,"published_at":"2026-06-18T23:16:19.213+00:00","url":"https://junglewise.ai/threats/cve-2026-56074-mervinpraison-praisonai-tool-approval-cache-bypass-in"},{"cve":"CVE-2026-44339","cvss":8.6,"epss":0.0043,"slug":"cve-2026-44339-praisonai-unsafe-tool-resolution-in-toolexecutionmixin","title":"PraisonAI unsafe tool resolution in ToolExecutionMixin","severity":"high","exploited":false,"published_at":"2026-05-11T13:59:17+00:00","url":"https://junglewise.ai/threats/cve-2026-44339-praisonai-unsafe-tool-resolution-in-toolexecutionmixin"},{"cve":"CVE-2026-44335","cvss":9.8,"epss":0.0057,"slug":"cve-2026-44335-mervinpraison-praisonai-ssrf-bypass-in-url-validation","title":"MervinPraison PraisonAI SSRF bypass in URL validation","severity":"critical","exploited":false,"published_at":"2026-05-06T22:08:11+00:00","url":"https://junglewise.ai/threats/cve-2026-44335-mervinpraison-praisonai-ssrf-bypass-in-url-validation"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":1,"exploited":0,"vulnerabilities":4},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":2,"exploited":0,"vulnerabilities":9},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"tensorflow (PyPI)","slug":"pypi-tensorflow","vulnerabilities":428,"url":"https://junglewise.ai/threats/technologies/pypi-tensorflow"},{"name":"tensorflow-cpu (PyPI)","slug":"tensorflow-cpu","vulnerabilities":424,"url":"https://junglewise.ai/threats/technologies/tensorflow-cpu"},{"name":"tensorflow-gpu (PyPI)","slug":"tensorflow-gpu","vulnerabilities":421,"url":"https://junglewise.ai/threats/technologies/tensorflow-gpu"},{"name":"open-webui (PyPI)","slug":"open-webui","vulnerabilities":177,"url":"https://junglewise.ai/threats/technologies/open-webui"},{"name":"Django (PyPI)","slug":"django","vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/django"},{"name":"apache-airflow (PyPI)","slug":"apache-airflow","vulnerabilities":152,"url":"https://junglewise.ai/threats/technologies/apache-airflow"},{"name":"plone (PyPI)","slug":"pypi-plone","vulnerabilities":101,"url":"https://junglewise.ai/threats/technologies/pypi-plone"},{"name":"praisonai (PyPI)","slug":"pypi-praisonai","vulnerabilities":86,"url":"https://junglewise.ai/threats/technologies/pypi-praisonai"},{"name":"exiv2 (PyPI)","slug":"exiv2","vulnerabilities":85,"url":"https://junglewise.ai/threats/technologies/exiv2"},{"name":"nltk (PyPI)","slug":"nltk","vulnerabilities":83,"url":"https://junglewise.ai/threats/technologies/nltk"},{"name":"mlflow (PyPI)","slug":"mlflow","vulnerabilities":82,"url":"https://junglewise.ai/threats/technologies/mlflow"},{"name":"pillow (PyPI)","slug":"pillow","vulnerabilities":79,"url":"https://junglewise.ai/threats/technologies/pillow"}],"technology":{"hub":true,"name":"praisonaiagents (PyPI)","slug":"pypi-praisonaiagents","vendor":{"name":"PyPI","slug":"pypi","url":"https://junglewise.ai/threats/vendors/pypi"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/pypi-praisonaiagents"},"most_severe":[{"cve":"CVE-2026-34938","cvss":10,"epss":0.0084,"slug":"cve-2026-34938-mervinpraison-praisonai-sandbox-escape-in-execute-code","title":"MervinPraison PraisonAI sandbox escape in execute_code","severity":"critical","exploited":false,"published_at":"2026-04-03T23:17:06.17+00:00","url":"https://junglewise.ai/threats/cve-2026-34938-mervinpraison-praisonai-sandbox-escape-in-execute-code"},{"cve":"CVE-2026-47392","cvss":9.9,"epss":0.0088,"slug":"cve-2026-47392-mervinpraison-praisonai-sandbox-escape-in-execute-code-tool","title":"MervinPraison PraisonAI sandbox escape in execute_code tool","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:12.087+00:00","url":"https://junglewise.ai/threats/cve-2026-47392-mervinpraison-praisonai-sandbox-escape-in-execute-code-tool"},{"cve":"CVE-2026-39888","cvss":9.9,"epss":0.0061,"slug":"cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code","title":"PraisonAI sandbox escape via frame traversal in execute_code","severity":"critical","exploited":false,"published_at":"2026-04-08T21:17:00.99+00:00","url":"https://junglewise.ai/threats/cve-2026-39888-praisonai-sandbox-escape-via-frame-traversal-in-execute-code"},{"cve":"CVE-2026-40288","cvss":9.8,"epss":0.0093,"slug":"cve-2026-40288-mervinpraison-praisonai-rce-via-job-workflow-yaml","title":"MervinPraison PraisonAI RCE via job workflow YAML","severity":"critical","exploited":false,"published_at":"2026-04-10T19:32:48+00:00","url":"https://junglewise.ai/threats/cve-2026-40288-mervinpraison-praisonai-rce-via-job-workflow-yaml"},{"cve":"CVE-2026-57123","cvss":9.8,"epss":0.009,"slug":"cve-2026-57123-praisonai-tools-mcp-server-authentication-bypass","title":"PraisonAI Tools MCP Server authentication bypass","severity":"critical","exploited":false,"published_at":"2026-09-14T15:17:05.753+00:00","url":"https://junglewise.ai/threats/cve-2026-57123-praisonai-tools-mcp-server-authentication-bypass"},{"cve":"CVE-2026-57125","cvss":9.8,"epss":0.006,"slug":"cve-2026-57125-praisonai-unauthenticated-remote-code-execution-via-api-v1-runs","title":"PraisonAI unauthenticated remote code execution via /api/v1/runs","severity":"critical","exploited":false,"published_at":"2026-09-14T15:17:05.9+00:00","url":"https://junglewise.ai/threats/cve-2026-57125-praisonai-unauthenticated-remote-code-execution-via-api-v1-runs"},{"cve":"CVE-2026-44335","cvss":9.8,"epss":0.0057,"slug":"cve-2026-44335-mervinpraison-praisonai-ssrf-bypass-in-url-validation","title":"MervinPraison PraisonAI SSRF bypass in URL validation","severity":"critical","exploited":false,"published_at":"2026-05-06T22:08:11+00:00","url":"https://junglewise.ai/threats/cve-2026-44335-mervinpraison-praisonai-ssrf-bypass-in-url-validation"},{"cve":"CVE-2026-40289","cvss":9.1,"epss":0.0052,"slug":"cve-2026-40289-praisonai-browser-server-session-hijacking-via-unauthenticated","title":"PraisonAI Browser Server session hijacking via unauthenticated WebSocket","severity":"critical","exploited":false,"published_at":"2026-04-10T19:32:59+00:00","url":"https://junglewise.ai/threats/cve-2026-40289-praisonai-browser-server-session-hijacking-via-unauthenticated"},{"cve":"CVE-2026-40111","cvss":4,"epss":0.0034,"slug":"cve-2026-40111-mervinpraison-praisonaiagents-os-command-injection-in-memory","title":"MervinPraison PraisonAIAgents OS command injection in Memory Hooks Executor","severity":"critical","exploited":false,"published_at":"2026-04-10T19:21:54+00:00","url":"https://junglewise.ai/threats/cve-2026-40111-mervinpraison-praisonaiagents-os-command-injection-in-memory"},{"cve":"CVE-2026-56078","cvss":8.8,"epss":0.0092,"slug":"cve-2026-56078-mervinpraison-praisonai-path-traversal-in-multiagentmonitor","title":"MervinPraison PraisonAI path traversal in MultiAgentMonitor","severity":"high","exploited":false,"published_at":"2026-06-18T23:16:19.76+00:00","url":"https://junglewise.ai/threats/cve-2026-56078-mervinpraison-praisonai-path-traversal-in-multiagentmonitor"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}