{"schema_version":1,"title":"PraisonAI vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in PraisonAI: 0 in the last 7 days and 5 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-57140, was published on 15 September 2026.","url":"https://junglewise.ai/threats/vendors/praisonai","json_url":"https://junglewise.ai/threats/vendors/praisonai.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/praisonai","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":6,"all_time":10,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":2,"last_90_days":5,"last_365_days":10},"latest":[{"cve":"CVE-2026-57140","cvss":9.4,"epss":0.0064,"slug":"cve-2026-57140-praisonai-agentos-unauthenticated-agent-listing-and-invocation","title":"PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from","severity":"critical","exploited":false,"published_at":"2026-09-15T11:17:11.473+00:00","url":"https://junglewise.ai/threats/cve-2026-57140-praisonai-agentos-unauthenticated-agent-listing-and-invocation"},{"cve":"CVE-2026-57139","cvss":9.8,"epss":0.0075,"slug":"cve-2026-57139-praisonai-mcpserver-unauthenticated-http-tools-exposure","title":"PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPServer.startHttp() in src/praisonai-ts/src/mcp/server.ts binds without a","severity":"critical","exploited":false,"published_at":"2026-09-15T11:17:11.327+00:00","url":"https://junglewise.ai/threats/cve-2026-57139-praisonai-mcpserver-unauthenticated-http-tools-exposure"},{"cve":"CVE-2026-55540","cvss":7.1,"epss":0.0039,"slug":"cve-2026-55540-praisonai-path-traversal-via-symlinks-and-unvalidated-working","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, is_path_within_directory() uses os.path.abspath() rather than os.path.re","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:34.74+00:00","url":"https://junglewise.ai/threats/cve-2026-55540-praisonai-path-traversal-via-symlinks-and-unvalidated-working"},{"cve":"CVE-2026-55538","cvss":7.3,"epss":0.0045,"slug":"cve-2026-55538-praisonai-agent-invocation-auth-bypass-via-missing-api-key","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, praisonai serve agents parses config[\"api_key\"] but _create_agents_app()","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:34.597+00:00","url":"https://junglewise.ai/threats/cve-2026-55538-praisonai-agent-invocation-auth-bypass-via-missing-api-key"},{"cve":"CVE-2026-55522","cvss":7.8,"epss":0.0022,"slug":"cve-2026-55522-praisonai-workflow-include-remote-code-execution-in-tools-py","title":"PraisonAI workflow include remote code execution in tools.py","severity":"high","exploited":false,"published_at":"2026-08-25T14:15:27+00:00","url":"https://junglewise.ai/threats/cve-2026-55522-praisonai-workflow-include-remote-code-execution-in-tools-py"},{"cvss":5.5,"slug":"praisonai-tool-approval-cache-bypass-in-shell-command-execution-2123e935","title":"PraisonAI tool approval cache bypass in shell command execution","severity":"medium","exploited":false,"published_at":"2026-06-19T00:31:37+00:00","url":"https://junglewise.ai/threats/praisonai-tool-approval-cache-bypass-in-shell-command-execution-2123e935"},{"cve":"CVE-2026-56076","cvss":8.1,"slug":"cve-2026-56076-praisonai-cross-origin-agent-execution-in-agui-endpoint","title":"PraisonAI cross-origin agent execution in AGUI endpoint","severity":"high","exploited":false,"published_at":"2026-06-18T23:16:19.49+00:00","url":"https://junglewise.ai/threats/cve-2026-56076-praisonai-cross-origin-agent-execution-in-agui-endpoint"},{"cve":"CVE-2026-56075","cvss":8.8,"epss":0.0071,"slug":"cve-2026-56075-praisonai-arbitrary-shell-command-execution-in-ui-modules","title":"PraisonAI arbitrary shell command execution in UI modules","severity":"high","exploited":false,"published_at":"2026-06-18T23:16:19.357+00:00","url":"https://junglewise.ai/threats/cve-2026-56075-praisonai-arbitrary-shell-command-execution-in-ui-modules"},{"cvss":8.1,"slug":"praisonai-platform-improper-authorization-in-delete-endpoints-f19b84b8","title":"PraisonAI Platform improper authorization in DELETE endpoints","severity":"high","exploited":false,"published_at":"2026-06-18T13:58:03+00:00","url":"https://junglewise.ai/threats/praisonai-platform-improper-authorization-in-delete-endpoints-f19b84b8"},{"cvss":6.5,"slug":"praisonai-spidertools-ssrf-protection-bypass-via-redirects-8e7f8982","title":"PraisonAI SpiderTools SSRF protection bypass via redirects","severity":"medium","exploited":false,"published_at":"2026-06-18T13:55:14+00:00","url":"https://junglewise.ai/threats/praisonai-spidertools-ssrf-protection-bypass-via-redirects-8e7f8982"}],"vendor":{"hub":true,"name":"PraisonAI","slug":"praisonai","description":"Open-source framework for building and deploying AI agent applications.","url":"https://junglewise.ai/threats/vendors/praisonai"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":2,"exploited":0,"vulnerabilities":2},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-57139","cvss":9.8,"epss":0.0075,"slug":"cve-2026-57139-praisonai-mcpserver-unauthenticated-http-tools-exposure","title":"PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPServer.startHttp() in src/praisonai-ts/src/mcp/server.ts binds without a","severity":"critical","exploited":false,"published_at":"2026-09-15T11:17:11.327+00:00","url":"https://junglewise.ai/threats/cve-2026-57139-praisonai-mcpserver-unauthenticated-http-tools-exposure"},{"cve":"CVE-2026-57140","cvss":9.4,"epss":0.0064,"slug":"cve-2026-57140-praisonai-agentos-unauthenticated-agent-listing-and-invocation","title":"PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from","severity":"critical","exploited":false,"published_at":"2026-09-15T11:17:11.473+00:00","url":"https://junglewise.ai/threats/cve-2026-57140-praisonai-agentos-unauthenticated-agent-listing-and-invocation"},{"cve":"CVE-2026-56075","cvss":8.8,"epss":0.0071,"slug":"cve-2026-56075-praisonai-arbitrary-shell-command-execution-in-ui-modules","title":"PraisonAI arbitrary shell command execution in UI modules","severity":"high","exploited":false,"published_at":"2026-06-18T23:16:19.357+00:00","url":"https://junglewise.ai/threats/cve-2026-56075-praisonai-arbitrary-shell-command-execution-in-ui-modules"},{"cve":"CVE-2026-56076","cvss":8.1,"slug":"cve-2026-56076-praisonai-cross-origin-agent-execution-in-agui-endpoint","title":"PraisonAI cross-origin agent execution in AGUI endpoint","severity":"high","exploited":false,"published_at":"2026-06-18T23:16:19.49+00:00","url":"https://junglewise.ai/threats/cve-2026-56076-praisonai-cross-origin-agent-execution-in-agui-endpoint"},{"cvss":8.1,"slug":"praisonai-platform-improper-authorization-in-delete-endpoints-f19b84b8","title":"PraisonAI Platform improper authorization in DELETE endpoints","severity":"high","exploited":false,"published_at":"2026-06-18T13:58:03+00:00","url":"https://junglewise.ai/threats/praisonai-platform-improper-authorization-in-delete-endpoints-f19b84b8"},{"cve":"CVE-2026-55522","cvss":7.8,"epss":0.0022,"slug":"cve-2026-55522-praisonai-workflow-include-remote-code-execution-in-tools-py","title":"PraisonAI workflow include remote code execution in tools.py","severity":"high","exploited":false,"published_at":"2026-08-25T14:15:27+00:00","url":"https://junglewise.ai/threats/cve-2026-55522-praisonai-workflow-include-remote-code-execution-in-tools-py"},{"cve":"CVE-2026-55538","cvss":7.3,"epss":0.0045,"slug":"cve-2026-55538-praisonai-agent-invocation-auth-bypass-via-missing-api-key","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, praisonai serve agents parses config[\"api_key\"] but _create_agents_app()","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:34.597+00:00","url":"https://junglewise.ai/threats/cve-2026-55538-praisonai-agent-invocation-auth-bypass-via-missing-api-key"},{"cve":"CVE-2026-55540","cvss":7.1,"epss":0.0039,"slug":"cve-2026-55540-praisonai-path-traversal-via-symlinks-and-unvalidated-working","title":"PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, is_path_within_directory() uses os.path.abspath() rather than os.path.re","severity":"high","exploited":false,"published_at":"2026-08-25T15:16:34.74+00:00","url":"https://junglewise.ai/threats/cve-2026-55540-praisonai-path-traversal-via-symlinks-and-unvalidated-working"},{"cvss":6.5,"slug":"praisonai-spidertools-ssrf-protection-bypass-via-redirects-8e7f8982","title":"PraisonAI SpiderTools SSRF protection bypass via redirects","severity":"medium","exploited":false,"published_at":"2026-06-18T13:55:14+00:00","url":"https://junglewise.ai/threats/praisonai-spidertools-ssrf-protection-bypass-via-redirects-8e7f8982"},{"cvss":5.5,"slug":"praisonai-tool-approval-cache-bypass-in-shell-command-execution-2123e935","title":"PraisonAI tool approval cache bypass in shell command execution","severity":"medium","exploited":false,"published_at":"2026-06-19T00:31:37+00:00","url":"https://junglewise.ai/threats/praisonai-tool-approval-cache-bypass-in-shell-command-execution-2123e935"}],"generated_at":"2026-09-26T11:07:00.153785+00:00","technologies":[]}