Security
فارسی
All products

praisonai

npm · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosureCVE-2026-61426 · GHSA-6WJP-V33H-5CVQ praisonai npm High Fix reported
npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chainingCVE-2026-57133 · GHSA-5JV7-2MJM-H6QJ praisonai npm High Fix reported
PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` ToolCVE-2026-57141 · GHSA-P69M-4F92-2V84 praisonai npm Critical Fix reported
npm PraisonAI AgentLoop onToolCall approval runs after tool executionCVE-2026-57137 · GHSA-H2W2-V7J6-XQM4 praisonai npm High Fix reported
npm PraisonAI SandboxExecutor allowedCommands bypass via shell chainingCVE-2026-57136 · GHSA-VJV9-7M7J-H833 praisonai npm High Fix reported
npm PraisonAI MCPServer exposes unauthenticated HTTP tools/callCVE-2026-57139 · GHSA-J4F3-55X4-R6Q2 praisonai npm Critical Fix reported
npm PraisonAI AgentOS exposes unauthenticated agent listing and invocationCVE-2026-57140 · GHSA-9752-MHQH-H34F praisonai npm Critical Fix reported
npm PraisonAI codeMode sandbox escape via Function constructorCVE-2026-57138 · GHSA-VMMJ-PFW7-FJWP praisonai npm Critical Fix reported
npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsCVE-2026-57135 · GHSA-GQMF-56H7-RRPF praisonai npm High Fix reported
npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validationCVE-2026-57134 · GHSA-4QQ2-2J2X-X62C praisonai npm High Fix reported