AI Threat Alert

PraisonAI Agents Vulnerabilities

pipAI Agents

AI Threat Alert tracks 79 known vulnerabilities in PraisonAI Agents, 15 rated critical — an AI/ML ai agents in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
79
Total CVEs
15
Critical
pip
Ecosystem
Oct 12, 2026
Last CVE
63%
Patch Rate
21d
Avg Time to Patch

Known Vulnerabilities(79 total, page 2 of 4)

SeverityCVE IDSummaryCVSSPublished
HIGHCVE-2026-61430PraisonAI: DNS rebinding SSRF bypass in web_crawl8.5Jul 15, 2026CRITICALCVE-2026-61447PraisonAI: RCE via unsandboxed LLM code execution10.0Jul 11, 2026HIGHCVE-2026-61429PraisonAI: SSRF bypass via DNS rebinding/redirects8.5Jul 11, 2026HIGHCVE-2026-61437PraisonAI: unsafe dynamic import enables RCE7.8Jul 10, 2026MEDIUMCVE-2026-61432PraisonAI: FastContext path traversal leaks host files5.7Jul 10, 2026MEDIUMCVE-2026-60089PraisonAI: config.toml path traversal overwrites files5.5Jul 10, 2026HIGHCVE-2026-56078PraisonAI: path traversal → arbitrary file read/write/RCE8.8Jun 18, 2026MEDIUMGHSA-35w5-pcw4-jx94praisonaiagents: unauth SSE endpoint enables event injection4.3Jun 18, 2026HIGHGHSA-vmf9-xx9w-86wxPraisonAI: DNS rebinding exposes MCP agent tools8.3Jun 18, 2026HIGHGHSA-qvpf-j64c-jmhrPraisonAI: auth bypass via Slack app_mention handler8.3Jun 18, 2026HIGHGHSA-63v4-w882-g4x2PraisonAI: XSS bypasses human-in-the-loop tool approval8.8Jun 18, 2026HIGHGHSA-v847-hxxw-3pxgPraisonAI: streaming bypass enables dangerous tool execution7.8Jun 18, 2026HIGHGHSA-w6h2-fr4q-xvxvPraisonAI: file tool shell injection enables RCE8.8Jun 18, 2026MEDIUMGHSA-6h9p-93hq-q7h6praisonaiagents: SSRF bypass via SpiderTools redirect6.5Jun 18, 2026MEDIUMGHSA-pv2j-rghr-v5r9praisonaiagents: sandbox escape via format-spec read6.5Jun 18, 2026CRITICALGHSA-x227-pf99-vffgpraisonaiagents: unauthenticated MCP SSE server enables RCE9.8Jun 18, 2026CRITICALGHSA-4869-x4pr-q22xPraisonAI: Unauthenticated RCE via Jobs API auth bypass9.8Jun 18, 2026HIGHGHSA-vxgj-xg5c-p4h7praisonaiagents: SSRF DNS bypass exposes internal services8.5Jun 18, 2026HIGHGHSA-2rcg-mm5h-xchxpraisonaiagents: @file: path traversal reads arbitrary files7.5Jun 18, 2026CRITICALGHSA-x8cv-xmq7-p8xppraisonaiagents: unauth AgentTeam API allows agent takeover9.8Jun 18, 2026CRITICALGHSA-892r-p3jq-jp24PraisonAI AgentOS: unauth remote agent invocation (CVSS 9.8)9.8Jun 18, 2026HIGHGHSA-rh39-9c67-59mhPraisonAI: member role can delete all workspace resources8.1Jun 18, 2026HIGHGHSA-c969-5x3p-vq3vpraisonaiagents: IMAP injection via prompt → email exfil8.1Jun 18, 2026HIGHGHSA-7qw2-w5rc-37x2PraisonAI: workflow policy bypass enables shell RCE7.8Jun 18, 2026HIGHGHSA-4pcv-mg8v-vrgfpraisonaiagents: SSRF + prompt injection, IAM cred exposure8.8Jun 18, 2026

Showing 26–50 of 79

← PreviousNext →

Frequently asked questions

What is PraisonAI Agents?

PraisonAI Agents is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does PraisonAI Agents have?

PraisonAI Agents has 79 known CVEs, 15 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is PraisonAI Agents distributed in?

PraisonAI Agents is distributed via the pip ecosystem and categorized as ai agents.

Where does the PraisonAI Agents vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of PraisonAI Agents?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor PraisonAI Agents in your stack

Get instant alerts when new vulnerabilities affect PraisonAI Agents. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring