9 Total advisories
9 Vulnerabilities
0 Malware
Vulnerabilities
CRITICAL 9.9
CVE-2026-57138
npm PraisonAI codeMode sandbox escape via Function constructor
HIGH 8.8
CVE-2026-57136
npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining
CRITICAL 9.8
CVE-2026-57141
PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool
HIGH 8.8
CVE-2026-57137
npm PraisonAI AgentLoop onToolCall approval runs after tool execution
CRITICAL 9.8
CVE-2026-57139
npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call
HIGH 8.8
CVE-2026-57133
npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
HIGH 7.6
CVE-2026-57135
npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients
CRITICAL 9.4
CVE-2026-57140
npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation
HIGH 8.2
CVE-2026-57134
npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation
Ready to move
Start Securing
Free, no credit card | First findings in minutes