Skip to content
OpenAdvisories

Package · npm

praisonai

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-57140

    PraisonAI AgentOS exposes unauthenticated agent listing and invocation

    PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and registers GET /api/agents and POST /api/chat without authentication middleware. …

    Mervin Praison PraisonAI praisonai npm
  • Critical 9.8
    CVE-2026-57139

    PraisonAI MCPServer exposes unauthenticated HTTP tools/call

    PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPServer.startHttp() in src/praisonai-ts/src/mcp/server.ts binds without a host restriction and forwards every HTTP POST request to handleRequest() without authentication or authorization. Any …

    Mervin Praison PraisonAI praisonai npm
  • Critical 9.9
    CVE-2026-57138

    PraisonAI codeMode sandbox escape via Function constructor

    PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript with new Function() inside with(sandbox) and relies on a small source-code blocklist plus shadowed proc…

    Mervin Praison PraisonAI praisonai npm
  • Critical 9.8
    CVE-2026-57141

    PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

    PraisonAI is a multi-agent teams system. Prior to 1.7.2, the codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts executes model-generated JavaScript with new Function() and with(sandbox), while a regular-expression blocklist can be bypassed with…

    Mervin Praison PraisonAI praisonai npm