CVE-2026-47390 MEDIUM 5.5 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40… 2026-07-21 CVE-2026-47391 CRITICAL 9.8 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example e… 2026-07-21 CVE-2026-47392 CRITICAL 9.9 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40…● PoC 2026-07-21 CVE-2026-47393 CRITICAL 9.8 Praisonai — PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a… 2026-07-21 CVE-2026-47394 HIGH 8.7 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GHSA-9mqq-jqxf-grvw / CVE-2026-4…● PoC 2026-07-21 CVE-2026-47395 MEDIUM 5.5 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40…● PoC 2026-07-21 CVE-2026-47396 CRITICAL 9.8 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server exposes a network-fa… 2026-07-21 CVE-2026-47397 HIGH 7.1 Praisonai — PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonA… 2026-07-21 CVE-2026-47398 HIGH 8.1 Praisonai — PraisonAI is a multi-agent teams system. The v4.6.32 chokepoint refactor (which patched CVE-2026-44334 / GHSA-…● PoC 2026-07-21 CVE-2026-47399 HIGH 8.8 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, t… 2026-07-21 CVE-2026-47405 HIGH 8.8 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47406 HIGH 8.1 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47407 CRITICAL 9.4 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, t… 2026-07-21 CVE-2026-47408 MEDIUM 6.5 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h… 2026-07-21 CVE-2026-47409 HIGH 8.1 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47410 CRITICAL 9.8 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h… 2026-07-21 CVE-2026-47411 MEDIUM 6.5 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47412 HIGH 8.1 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h… 2026-07-21 CVE-2026-47413 CRITICAL 9.6 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h… 2026-07-21 CVE-2026-47414 HIGH 7.6 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h… 2026-07-21 CVE-2026-47415 HIGH 8.3 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47416 CRITICAL 9.6 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 a… 2026-07-21 CVE-2026-47417 HIGH 8.1 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h…● PoC 2026-07-21 CVE-2026-47418 HIGH 8.1 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h… 2026-07-21 CVE-2026-47419 HIGH 8.3 Praisonai Platform — PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 h… 2026-07-21 CVE-2026-60085 HIGH 8.7 Praisonai — PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox… 2026-07-15 CVE-2026-60087 MEDIUM 6.9 Praisonai — PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial …● PoC 2026-07-15 CVE-2026-61427 MEDIUM 6.9 Praisonai — PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api…● PoC 2026-07-15 CVE-2026-61430 HIGH 8.4 Praisonai — PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl tool that valida…● PoC 2026-07-15 CVE-2026-61433 HIGH 8.5 Praisonai — PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source c… 2026-07-15 CVE-2026-61435 HIGH 8.8 Praisonai — PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints (src/prai…● PoC 2026-07-15 CVE-2026-61436 HIGH 8.8 Praisonai — PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing unauthenti…● PoC 2026-07-15 CVE-2026-61438 HIGH 7 Praisonai — PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_pyt…● PoC 2026-07-15 CVE-2026-61440 HIGH 7.1 Praisonai — PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspac…● PoC 2026-07-15 CVE-2026-61443 HIGH 8.6 Praisonai — PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that e…● PoC 2026-07-15 CVE-2026-61446 HIGH 8.6 Praisonai — PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager… 2026-07-15 CVE-2026-60088 MEDIUM 6.8 Praisonai — PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers…● PoC 2026-07-11 CVE-2026-60090 CRITICAL 9.3 Praisonai — PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassand…● PoC 2026-07-11 CVE-2026-61426 HIGH 8.8 Praisonai — PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key…● PoC 2026-07-11 CVE-2026-61428 MEDIUM 6.9 Praisonai — PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticat…● PoC 2026-07-11 CVE-2026-61429 HIGH 8.4 Praisonai — PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium …● PoC 2026-07-11 CVE-2026-61439 HIGH 8.7 Praisonai — PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold…● PoC 2026-07-11 CVE-2026-61442 HIGH 7.1 Praisonai — PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH r…● PoC 2026-07-11 CVE-2026-61445 CRITICAL 9.4 Praisonai — PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder com…● PoC 2026-07-11 CVE-2026-61447 CRITICAL 10 Praisonai — PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that exe…● PoC 2026-07-11 CVE-2026-60086 MEDIUM 6.9 Praisonai — PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense o…● PoC 2026-07-10 CVE-2026-60089 MEDIUM 6.9 Praisonai — PraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .prais…● PoC 2026-07-10 CVE-2026-60091 MEDIUM 6.9 Praisonai — PraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the Jobs API … 2026-07-10 CVE-2026-61431 MEDIUM 6.8 Praisonai — PraisonAI before 4.6.78 contains a path traversal vulnerability in ContextGatherer that fails to validate incl…● PoC 2026-07-10 CVE-2026-61432 MEDIUM 6.9 Praisonai — PraisonAI (praisonaiagents) before 1.6.78 contains a path traversal vulnerability in the FastContext feature (…● PoC 2026-07-10 CVE-2026-61434 HIGH 8.7 Praisonai — PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that all…● PoC 2026-07-10 CVE-2026-61437 HIGH 8.5 Praisonai — PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability …● PoC 2026-07-10 CVE-2026-61441 HIGH 7.1 Praisonai — PraisonAI Platform (praisonai-platform) before 0.1.9 improperly authorizes deletion of issue dependencies. The…● PoC 2026-07-10 CVE-2026-61444 CRITICAL 9.4 Praisonai — PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the agents_file…● PoC 2026-07-10