PraisonAI Agents Vulnerabilities

pipAI Agents

AI Threat Alert tracks 79 known vulnerabilities in PraisonAI Agents, 15 rated critical — an AI/ML ai agents in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

79
Total CVEs
15
Critical
pip
Ecosystem
Oct 12, 2026
Last CVE
63%
Patch Rate
21d
Avg Time to Patch

Known Vulnerabilities(79 total, page 1 of 4)

SeverityCVE IDSummaryCVSSPublished
HIGHCVE-2026-57143PraisonAI: SSRF via LLM-controlled SearxNG URL8.8Oct 12, 2026CRITICALCVE-2026-57118PraisonAI agents: unauthenticated access to agent endpoints9.8Oct 12, 2026HIGHCVE-2026-57112PraisonAI: DNS rebinding exposes MCP SSE tool calls8.3Sep 15, 2026HIGHCVE-2026-57122PraisonAI: missing HMAC check lets forged bot events8.6Sep 14, 2026HIGHCVE-2026-57130PraisonAI: IMAP injection via unsanitized email tool params8.1Sep 14, 2026HIGHCVE-2026-57129PraisonAI: path traversal exposes arbitrary files7.5Sep 14, 2026MEDIUMCVE-2026-57128PraisonAI: SSE server auth bypass exposes config, events4.3Sep 14, 2026HIGHCVE-2026-57126PraisonAI: SpiderTools SSRF bypass via DNS resolution8.5Sep 14, 2026CRITICALCVE-2026-57125PraisonAI: unauth RCE via YAML approval bypass9.8Sep 14, 2026CRITICALCVE-2026-57123PraisonAI: unauthenticated MCP tool server enables RCE9.8Sep 14, 2026MEDIUMCVE-2026-57120PraisonAI: sandbox bypass leaks agent internals6.5Sep 14, 2026MEDIUMCVE-2026-57115PraisonAI: SSRF via unvalidated redirects in scrape_page6.5Sep 14, 2026HIGHCVE-2026-55525PraisonAI: SSRF via redirect bypasses crawl allowlist7.5Aug 25, 2026HIGHCVE-2026-55528PraisonAI: AgentServer auth token never enforced8.2Aug 25, 2026HIGHCVE-2026-55526PraisonAI: SSRF bypass via DNS-rebinding hostname8.5Aug 25, 2026MEDIUMCVE-2026-55530PraisonAI: missing authz lets agent mass-rewrite files6.1Aug 25, 2026HIGHCVE-2026-55527PraisonAI: path traversal in agent memory allows arbitrary file write7.1Aug 25, 2026HIGHCVE-2026-55539PraisonAI: no-auth Jobs API allows arbitrary agent runs8.6Aug 25, 2026HIGHCVE-2026-55532PraisonAI: Origin bypass CSRF enables prompt injection7.6Aug 25, 2026HIGHCVE-2026-55524PraisonAI: SSRF bypass in web_crawl via TOCTOU/rebinding7.5Aug 5, 2026HIGHCVE-2026-55523PraisonAI: SSRF via redirect bypass in web_crawl()--Aug 5, 2026HIGHCVE-2026-55522PraisonAI: RCE via workflow include bypasses safe loader7.8Aug 5, 2026HIGHCVE-2026-61446PraisonAI: RCE via unsigned plugin auto-load8.4Jul 15, 2026HIGHCVE-2026-61443PraisonAI: path traversal leads to RCE via SkillTools8.1Jul 15, 2026MEDIUMCVE-2026-60087PraisonAI: approval caching flaw enables file write abuse6.1Jul 15, 2026

Showing 1–25 of 79

Frequently asked questions

What is PraisonAI Agents?

PraisonAI Agents is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does PraisonAI Agents have?

PraisonAI Agents has 79 known CVEs, 15 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is PraisonAI Agents distributed in?

PraisonAI Agents is distributed via the pip ecosystem and categorized as ai agents.

Where does the PraisonAI Agents vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of PraisonAI Agents?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor PraisonAI Agents in your stack

Get instant alerts when new vulnerabilities affect PraisonAI Agents. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring