Skip to content
OpenAdvisories

Vendor

PraisonAI

6 known vulnerabilities.

Products

PraisonAI 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-58653

    PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update

    PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistic…

    PraisonAI PraisonAI praisonai-platform PyPI
  • Medium 6.5
    CVE-2026-56077

    PraisonAI - Information Disclosure via Shared MultiAgentLedger State

    PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs. Attackers can exploit the lack of agent ID uniqueness enforcem…

    PraisonAI PraisonAI
  • Medium 5.5
    CVE-2026-56074

    PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching

    PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then s…

    PraisonAI PraisonAI praisonaiagents PyPI