PraisonAI Agents Vulnerabilities

pip AI Agents

AI Threat Alert tracks 53 known vulnerabilities in PraisonAI Agents, 11 rated critical — an AI/ML ai agents in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
53
Total CVEs
11
Critical
pip
Ecosystem
Aug 5, 2026
Last CVE
62%
Patch Rate
6d
Avg Time to Patch

Known Vulnerabilities (53 total, page 2 of 3)

Severity CVE ID Summary CVSS Published
HIGH CVE-2026-47419 praisonai-platform: IDOR enables cross-workspace agent read/write/delete 8.3 Jun 5, 2026 MEDIUM CVE-2026-47390 PraisonAI: SSRF bypass via loopback alias encodings 5.5 May 29, 2026 MEDIUM CVE-2026-47395 PraisonAI: SSRF via @url mention exposes localhost services 5.5 May 29, 2026 CRITICAL CVE-2026-47392 praisonaiagents: RCE via Python sandbox bypass 9.9 May 29, 2026 CRITICAL CVE-2026-47391 PraisonAI: Unauth RCE via A2A eval injection 9.8 May 29, 2026 HIGH CVE-2026-47397 PraisonAI: arbitrary file write via hidden webpage metadata -- May 29, 2026 HIGH CVE-2026-44339 praisonaiagents: tool bypass enables undeclared callable exec 8.6 May 11, 2026 HIGH CVE-2026-44335 praisonaiagents: SSRF via URL parser confusion bypass -- May 6, 2026 HIGH GHSA-rg3h-x3jw-7jm5 PraisonAI: SQL injection across 9 DB backends 8.1 Apr 17, 2026 MEDIUM CVE-2026-40151 PraisonAI: unauthenticated agent config and system prompt disclosure 5.3 Apr 10, 2026 HIGH CVE-2026-40153 praisonaiagents: env var expansion exposes production secrets 7.4 Apr 10, 2026 MEDIUM CVE-2026-40152 praisonaiagents: glob traversal leaks filesystem metadata 5.3 Apr 10, 2026 HIGH CVE-2026-40158 PraisonAI: AST sandbox bypass enables host RCE 8.6 Apr 10, 2026 MEDIUM CVE-2026-40159 PraisonAI: MCP env inheritance exposes API keys 5.5 Apr 10, 2026 HIGH GHSA-x462-jjpc-q4q4 praisonaiagents: CORS bypass enables silent agent RCE 8.1 Apr 10, 2026 HIGH CVE-2026-40160 praisonaiagents: SSRF in web_crawl exposes cloud metadata -- Apr 10, 2026 MEDIUM GHSA-ffp3-3562-8cv3 PraisonAI: tool approval bypass leaks env credentials 5.5 Apr 10, 2026 HIGH GHSA-g985-wjh9-qxxc PraisonAI: untrusted tools.py import enables RCE 8.4 Apr 10, 2026 CRITICAL GHSA-vc46-vw85-3wvm PraisonAI: RCE via malicious workflow YAML execution 9.8 Apr 10, 2026 CRITICAL GHSA-8x8f-54wf-vv92 PraisonAI: auth bypass enables browser session hijack 9.1 Apr 10, 2026 HIGH CVE-2026-40150 PraisonAIAgents: SSRF exposes cloud metadata via web_crawl 7.7 Apr 9, 2026 MEDIUM CVE-2026-40117 PraisonAI: arbitrary file read via unguarded skill tool 6.2 Apr 9, 2026 CRITICAL CVE-2026-40111 PraisonAI: RCE via shell injection in memory hooks executor -- Apr 9, 2026 CRITICAL CVE-2026-39888 praisonaiagents: sandbox escape enables host RCE 10.0 Apr 8, 2026 MEDIUM GHSA-766v-q9x3-g744 praisonaiagents: agent context leak + path traversal 6.5 Apr 8, 2026

Showing 26–50 of 53

Frequently asked questions

What is PraisonAI Agents?

PraisonAI Agents is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does PraisonAI Agents have?

PraisonAI Agents has 53 known CVEs, 11 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is PraisonAI Agents distributed in?

PraisonAI Agents is distributed via the pip ecosystem and categorized as ai agents.

Where does the PraisonAI Agents vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of PraisonAI Agents?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor PraisonAI Agents in your stack

Get instant alerts when new vulnerabilities affect PraisonAI Agents. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring