PraisonAI is a multi-agent teams system. Prior to version 1.5.90, execute_code() in praisonai-agents runs attacker-controlled Python inside a three-la...
praison Vulnerability Advisory Catalog
Total 53 security vulnerabilities recorded for praison software and firmware.
CVE-2026-34938
CRITICAL
Component: praisonaiagents
📅 2026-04-03
CVSS 10.0
Dossier →
CVE-2026-34937
HIGH
Component: praisonaiagents
PraisonAI is a multi-agent teams system. Prior to version 1.5.90, run_python() in praisonai constructs a shell command string by interpolating user-co...
📅 2026-04-03
CVSS 7.8
Dossier →
CVE-2026-34936
HIGH
Component: praisonai
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, passthrough() and apassthrough() in praisonai accept a caller-controlled api_base pa...
📅 2026-04-03
CVSS 7.7
Dossier →
CVE-2026-34935
CRITICAL
Component: praisonai
PraisonAI is a multi-agent teams system. From version 4.5.15 to before version 4.5.69, the --mcp CLI argument is passed directly to shlex.split() and ...
📅 2026-04-03
CVSS 9.8
Dossier →
CVE-2026-34934
CRITICAL
Component: praisonai
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, the get_all_user_threads function constructs raw SQL queries using f-strings with un...
📅 2026-04-03
CVSS 9.8
Dossier →
Page 3 of 3 (53 Total Records)