PraisonAI Agents Vulnerabilities

pipAI Agents

AI Threat Alert tracks 79 known vulnerabilities in PraisonAI Agents, 15 rated critical — an AI/ML ai agents in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

79
Total CVEs
15
Critical
pip
Ecosystem
Oct 12, 2026
Last CVE
63%
Patch Rate
21d
Avg Time to Patch

Known Vulnerabilities(79 total, page 3 of 4)

SeverityCVE IDSummaryCVSSPublished
HIGHGHSA-6jcq-6546-qrrwPraisonAI: sandbox escape via silent Landlock fallback8.8Jun 18, 2026HIGHCVE-2026-47419praisonai-platform: IDOR enables cross-workspace agent read/write/delete8.3Jun 5, 2026MEDIUMCVE-2026-47390PraisonAI: SSRF bypass via loopback alias encodings5.5May 29, 2026MEDIUMCVE-2026-47395PraisonAI: SSRF via @url mention exposes localhost services5.5May 29, 2026CRITICALCVE-2026-47392praisonaiagents: RCE via Python sandbox bypass9.9May 29, 2026CRITICALCVE-2026-47391PraisonAI: Unauth RCE via A2A eval injection9.8May 29, 2026HIGHCVE-2026-47397PraisonAI: arbitrary file write via hidden webpage metadata--May 29, 2026HIGHCVE-2026-44339praisonaiagents: tool bypass enables undeclared callable exec8.6May 11, 2026HIGHCVE-2026-44335praisonaiagents: SSRF via URL parser confusion bypass--May 6, 2026HIGHGHSA-rg3h-x3jw-7jm5PraisonAI: SQL injection across 9 DB backends8.1Apr 17, 2026MEDIUMCVE-2026-40151PraisonAI: unauthenticated agent config and system prompt disclosure5.3Apr 10, 2026HIGHCVE-2026-40153praisonaiagents: env var expansion exposes production secrets7.4Apr 10, 2026MEDIUMCVE-2026-40152praisonaiagents: glob traversal leaks filesystem metadata5.3Apr 10, 2026HIGHCVE-2026-40158PraisonAI: AST sandbox bypass enables host RCE8.6Apr 10, 2026MEDIUMCVE-2026-40159PraisonAI: MCP env inheritance exposes API keys5.5Apr 10, 2026HIGHGHSA-x462-jjpc-q4q4praisonaiagents: CORS bypass enables silent agent RCE8.1Apr 10, 2026HIGHCVE-2026-40160praisonaiagents: SSRF in web_crawl exposes cloud metadata--Apr 10, 2026MEDIUMGHSA-ffp3-3562-8cv3PraisonAI: tool approval bypass leaks env credentials5.5Apr 10, 2026HIGHGHSA-g985-wjh9-qxxcPraisonAI: untrusted tools.py import enables RCE8.4Apr 10, 2026CRITICALGHSA-vc46-vw85-3wvmPraisonAI: RCE via malicious workflow YAML execution9.8Apr 10, 2026CRITICALGHSA-8x8f-54wf-vv92PraisonAI: auth bypass enables browser session hijack9.1Apr 10, 2026HIGHCVE-2026-40150PraisonAIAgents: SSRF exposes cloud metadata via web_crawl7.7Apr 9, 2026MEDIUMCVE-2026-40117PraisonAI: arbitrary file read via unguarded skill tool6.2Apr 9, 2026CRITICALCVE-2026-40111PraisonAI: RCE via shell injection in memory hooks executor--Apr 9, 2026CRITICALCVE-2026-39888praisonaiagents: sandbox escape enables host RCE10.0Apr 8, 2026

Showing 51–75 of 79

Frequently asked questions

What is PraisonAI Agents?

PraisonAI Agents is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does PraisonAI Agents have?

PraisonAI Agents has 79 known CVEs, 15 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is PraisonAI Agents distributed in?

PraisonAI Agents is distributed via the pip ecosystem and categorized as ai agents.

Where does the PraisonAI Agents vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of PraisonAI Agents?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor PraisonAI Agents in your stack

Get instant alerts when new vulnerabilities affect PraisonAI Agents. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring