pypi

praisonai

100 Total advisories

100 Vulnerabilities

0 Malware

Dependency scanning

Check whether praisonai is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

praisonai

Vulnerabilities

Duplicate Advisory: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL

PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked

PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing

PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

PraisonAI: Shell command allowlist bypass via find -exec built-in action

PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace

PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface

PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

PraisonAI: Project custom command templates can read outside-workspace files into model prompts

PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents

PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL

PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace

PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface

PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing

PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

PraisonAI: Project custom command templates can read outside-workspace files into model prompts

PraisonAI: Shell command allowlist bypass via find -exec built-in action

PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents

PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked

Duplicate Advisory: PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface

Duplicate Advisory: PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

Duplicate Advisory: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

Duplicate Advisory: PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

Duplicate Advisory: PraisonAI: Shell command allowlist bypass via find -exec built-in action

Duplicate Advisory: PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

Duplicate Advisory: PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

Duplicate Advisory: PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked

Duplicate Advisory: PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace

Duplicate Advisory: PraisonAI: Project custom command templates can read outside-workspace files into model prompts

Duplicate Advisory: PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL

Duplicate Advisory: PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets

Duplicate Advisory: PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

Duplicate Advisory: PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents

Duplicate Advisory: PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing

PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation

PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution

PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114

PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server

PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)

PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks

PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server

PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated

PraisonAI MCP HTTP server has unauthenticated unbounded session accumulation (memory exhaustion; session TTL never enforced)

PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete

PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced