PraisonAI vulnerabilities

CVEs whose affected-version data names the PraisonAI package (npm, pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

PraisonAI vulnerabilities

PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing

PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools

PraisonAI recipe.run_stream skips dangerous-tool policy enforcement

PraisonAI: Compute-bridged file tools allow shell command injection

PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass

praisonai: recipe serve auth middleware silently disables itself when no secret is set

PraisonAI: Jobs API exposes agent-execution endpoints with no authentication

PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding

PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation

PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)

PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai

PraisonAI Code agent tools fail open without a workspace boundary

PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation

npm PraisonAI codeMode sandbox escape via Function constructor

npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients

npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation

npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call

npm PraisonAI AgentLoop onToolCall approval runs after tool execution

npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining

PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml

PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default

PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication

PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

PraisonAI has an Arbitrary File Write in Python API