PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch name

PraisonAI before 1.6.78 Remote Code Execution via CodeAgent

PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API

Arbitrary File Write / Path Traversal in Action Orchestrator

PraisonAI: Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

PraisonAI codeMode sandbox escape via Function constructor

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

PraisonAI before 4.6.78 Arbitrary File Write and Command Execution

PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation

PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

PraisonAI MCPServer exposes unauthenticated HTTP tools/call

PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

praisonai: Jobs API exposes agent-execution endpoints with no authentication

PraisonAI UI MCP connect endpoint allows unauthenticated local command execution

praisonai: recipe serve auth middleware silently disables itself when no secret is set

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass

PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension

SSRF bypass in PraisonAI

Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI

PraisonAI: Critical RCE via `type: job` workflow YAML

PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

PraisonAI Affected by Remote Code Execution via YAML Deserialization in Agent Definition Loading

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

PraisonAI: Second-Order SQL Injection in `get_all_user_threads`

PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection

PraisonAI Affected by Untrusted Remote Template Code Execution

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai

PraisonAI AgentOS exposes unauthenticated agent listing and invocation

PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)

PraisonAI before 4.6.78 Code Injection via f-string

PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

PraisonAI: Authentication Bypass in OAuthManager.validate_token()

PraisonAI: Missing Authentication in WebSocket Gateway

PraisonAI: Compute-bridged file tools allow shell command injection

PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools

PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals

PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining

PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

PraisonAI AgentLoop onToolCall approval runs after tool execution