praisonaiagents vulnerabilities

CVEs whose affected-version data names the praisonaiagents package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

praisonaiagents vulnerabilities

PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute

PraisonAI has an SSRF bypass

PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)

PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool

PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback

PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate

PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool

PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary

PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `main` callables execute