Skip to content
OpenAdvisories

Vendor

Mervin Praison

180 known vulnerabilities.

Products

PraisonAI 147 praisonaiagents 26 praisonai-platform 20 Featured Image 2 Praison SEO WordPress 1 < 1.6.40 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-61447 Public exploit EPSS 15%

    PraisonAI before 1.6.78 Remote Code Execution via CodeAgent

    PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through promp…

    Mervin Praison PraisonAI praisonaiagents PyPI
  • High 7.3
    CVE-2026-44338 Public exploit Scanner template EPSS 33%

    PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

    PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the …

    Mervin Praison PraisonAI praisonai PyPI