pypi

praisonaiagents

81 Total advisories

81 Vulnerabilities

0 Malware

Dependency scanning

Check whether praisonaiagents is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

praisonaiagents

Vulnerabilities

PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)

praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

praisonaiagents: AgentServer declares auth_token but never enforces it on any route

praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location

praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets

praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)

praisonaiagents: AgentServer declares auth_token but never enforces it on any route

praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool

praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location

praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass

PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter

PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint

praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS

PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in

PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters

PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools

PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools

PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder

PraisonAI: SpiderTools redirect-target SSRF protection bypass

PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in

PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS

PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder

PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters

PraisonAI: SpiderTools redirect-target SSRF protection bypass

PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter

PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint

PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback

PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context

PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context

PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings

PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings

PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate

PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary

PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling

PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool

PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL

PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)

PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)

PraisonAI has an SSRF bypass

PraisonAI has an SSRF bypass

PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary

PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate

PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool

PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling

PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL

PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback

PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

PraisonAI has critical RCE via `type: job` workflow YAML

PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)

praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.init()` — path traversal to any writable location

praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.init()` — path traversal to any writable location

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `main` callables execute

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `main` callables execute

PraisonAI vulnerable to sandbox escape via `print.self` builtins module leak in `execute_code` (subprocess mode)

PraisonAI vulnerable to sandbox escape via `print.self` builtins module leak in `execute_code` (subprocess mode)