PraisonAI Vulnerabilities

pipAI Agents

AI Threat Alert tracks 196 known vulnerabilities in PraisonAI, 52 rated critical — an AI/ML ai agents in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

196
Total CVEs
52
Critical
pip
Ecosystem
Oct 23, 2026
Last CVE
61%
Patch Rate
23d
Avg Time to Patch

Known Vulnerabilities(196 total, page 3 of 8)

SeverityCVE IDSummaryCVSSPublished
HIGHCVE-2026-55533PraisonAI: auth fail-open lets unauthenticated recipe execution8.2Aug 25, 2026HIGHCVE-2026-55532PraisonAI: Origin bypass CSRF enables prompt injection7.6Aug 25, 2026CRITICALCVE-2026-55536PraisonAI: WebSocket auth bypass hijacks browser agent9.1Aug 25, 2026HIGHCVE-2026-55524PraisonAI: SSRF bypass in web_crawl via TOCTOU/rebinding7.5Aug 5, 2026HIGHCVE-2026-55522PraisonAI: RCE via workflow include bypasses safe loader7.8Aug 5, 2026CRITICALCVE-2026-48168PraisonAI: shell injection in Claude Action enables RCE10.0Aug 5, 2026HIGHCVE-2026-61436PraisonAI: missing webhook signature check spoofs agents8.6Jul 15, 2026HIGHCVE-2026-61446PraisonAI: RCE via unsigned plugin auto-load8.4Jul 15, 2026HIGHCVE-2026-61443PraisonAI: path traversal leads to RCE via SkillTools8.1Jul 15, 2026MEDIUMCVE-2026-61440PraisonAI: broken authz lets members hijack labels6.5Jul 15, 2026HIGHCVE-2026-61438PraisonAI: RCE via broken AST sandbox in workflows7.3Jul 15, 2026HIGHCVE-2026-61433PraisonAI: code injection via unsafe config codegen7.8Jul 15, 2026HIGHCVE-2026-60085PraisonAI: sandbox policy no-op enables RCE, file read7.5Jul 15, 2026MEDIUMCVE-2026-60087PraisonAI: approval caching flaw enables file write abuse6.1Jul 15, 2026HIGHCVE-2026-61430PraisonAI: DNS rebinding SSRF bypass in web_crawl8.5Jul 15, 2026HIGHCVE-2026-61435PraisonAI: Host header spoof bypasses agent auth8.2Jul 15, 2026HIGHCVE-2026-61427PraisonAI: MCP server auth bypass by default7.3Jul 15, 2026CRITICALCVE-2026-61447PraisonAI: RCE via unsandboxed LLM code execution10.0Jul 11, 2026CRITICALCVE-2026-61445PraisonAI: AICoder root RCE via unsanitized tool calls9.9Jul 11, 2026HIGHCVE-2026-61442PraisonAI Platform: workspace members bypass owner authz7.1Jul 11, 2026HIGHCVE-2026-61439PraisonAI: weak default block threshold lets prompt injection through7.5Jul 11, 2026HIGHCVE-2026-61429PraisonAI: SSRF bypass via DNS rebinding/redirects8.5Jul 11, 2026HIGHCVE-2026-61428PraisonAI: webhook signature bypass enables spoofing7.3Jul 11, 2026HIGHCVE-2026-61426PraisonAI: insecure defaults expose agent secrets8.6Jul 11, 2026CRITICALCVE-2026-60090PraisonAI: SQL/CQL injection via unvalidated vector dim9.8Jul 11, 2026

Showing 51–75 of 196

Frequently asked questions

What is PraisonAI?

PraisonAI is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does PraisonAI have?

PraisonAI has 196 known CVEs, 52 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is PraisonAI distributed in?

PraisonAI is distributed via the pip ecosystem and categorized as ai agents.

Where does the PraisonAI vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of PraisonAI?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor PraisonAI in your stack

Get instant alerts when new vulnerabilities affect PraisonAI. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring