Skip to content
OpenAdvisories

Vendor

PraisonAI

6 known vulnerabilities.

Products

PraisonAI 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-56078

    PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitor

    PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enab…

    PraisonAI PraisonAI praisonaiagents PyPI
  • High 8.1
    CVE-2026-56076

    PraisonAI - Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

    PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution. The POST /agui endpoint lacks authentication and hardcodes Access-Control-Allow-Origin: * he…

    PraisonAI PraisonAI
  • High 8.8
    CVE-2026-56075

    PraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode Override

    PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment variable. Authenticated attackers can instr…

    PraisonAI PraisonAI praisonai PyPI