GCVE - cpe:2.3:a:praisonai:praisonai:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:praisonai:praisonai:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Praisonai (`db90f1ad-0931-514c-bb71-34ee452ab27d`)
Product	Praisonai (`a1fa8b04-3d88-5e9d-b5a4-f79e206dfa82`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-58653`	vulnerable	2026-07-29 01:03:17.317175	PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update MEDIUM (4.3) PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace constraints. Published: 2026-07-02T12:34:00.914Z Updated: 2026-07-02T13:15:55.445Z Open on db.gcve.eu Reference links https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2fjj-qqg8-fg7x https://www.vulncheck.com/advisories/praisonai-authorization-bypass-via-unvalidated-project-id-in-issue-create-update	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-56078`	vulnerable	2026-07-29 01:00:28.863831	PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitor HIGH (8.8) PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution. Published: 2026-06-18T22:12:25.447Z Updated: 2026-11-08T14:05:27.382Z Open on db.gcve.eu Reference links https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-766v-q9x3-g744 https://github.com/MervinPraison/PraisonAI https://www.vulncheck.com/advisories/praisonai-arbitrary-file-read-and-write-via-path-traversal-in-multiagentmonitor	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-56077`	vulnerable	2026-07-29 01:00:28.863540	PraisonAI - Information Disclosure via Shared MultiAgentLedger State MEDIUM (6.5) PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs. Attackers can exploit the lack of agent ID uniqueness enforcement to share ledger instances and expose system prompts and conversation history between agents. Published: 2026-06-18T22:12:24.781Z Updated: 2026-11-08T14:05:26.716Z Open on db.gcve.eu Reference links https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-766v-q9x3-g744 https://github.com/MervinPraison/PraisonAI https://www.vulncheck.com/advisories/praisonai-information-disclosure-via-shared-multiagentledger-state	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-56076`	vulnerable	2026-07-29 01:00:28.863351	PraisonAI - Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint HIGH (8.1) PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution. The POST /agui endpoint lacks authentication and hardcodes Access-Control-Allow-Origin: * headers, combined with Starlette's Content-Type-agnostic JSON parsing, enabling attackers to bypass CORS preflight checks via simple requests and exfiltrate sensitive agent responses including tool execution results and environment data. Published: 2026-06-18T22:12:24.090Z Updated: 2026-11-08T14:05:26.041Z Open on db.gcve.eu Reference links https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x462-jjpc-q4q4 https://www.vulncheck.com/advisories/praisonai-cross-origin-agent-execution-via-hardcoded-wildcard-cors-and-missing-authentication-on-agui-endpoint	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-56075`	vulnerable	2026-07-29 01:00:28.862952	PraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode Override HIGH (8.8) PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment variable. Authenticated attackers can instruct the LLM agent to execute arbitrary shell commands via subprocess.run with shell=True, bypassing the manual approval gate and insufficient command sanitization blocklists. Published: 2026-06-18T22:12:23.417Z Updated: 2026-11-08T14:05:25.350Z Open on db.gcve.eu Reference links https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qwgj-rrpj-75xm https://www.vulncheck.com/advisories/praisonai-arbitrary-shell-command-execution-via-hardcoded-approval-mode-override	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-56074`	vulnerable	2026-07-29 01:00:28.861650	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Praisonai

Notes

PURL mappings

Vulnerability references

Contribute