CVE-2026-44339

< 1.6.37

PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.37 and praisonaiagents version 1.6.37, praisonaiagents res

8.6HIGH

CVE-2026-44335

< 1.6.32

PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that coul

9.8CRITICAL

CVE-2026-41496

< 1.6.9

PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.9 and praisonaiagents version 1.6.9, the fix for CVE-2026-

8.1HIGH

CVE-2026-40289

< 1.5.140

PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the browser bridge

9.1CRITICAL

CVE-2026-40288

< 1.5.140

PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the workflow engin

9.8CRITICAL

CVE-2026-40287

< 1.5.140

PraisonAI is a multi-agent teams system. Versions 4.5.138 and below are vulnerable to arbitrary code execution through automatic,

8.4HIGH

CVE-2026-40160

< 1.5.128

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, web_crawl's httpx fallback path passes user-supplied URLs directl

6.5MEDIUM

CVE-2026-40153

< 1.5.128

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the execute_command function in shell_tools.py calls os.path.expa

7.4HIGH

CVE-2026-40152

< 1.5.128

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he list_files() tool in FileTools validates the directory paramet

5.3MEDIUM

CVE-2026-40150

< 1.5.128

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the web_crawl() function in praisonaiagents/tools/web_crawl_tools

7.7HIGH

CVE-2026-40117

< 1.5.128

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, read_skill_file() in skill_tools.py allows reading arbitrary file

6.2MEDIUM

CVE-2026-40111

< 1.5.128

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he memory hooks executor in praisonaiagents passes a user-control

8.8HIGH

CVE-2026-34954

< 1.5.95

PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the desti

8.6HIGH

CVE-2026-34938

< 1.5.90

PraisonAI is a multi-agent teams system. Prior to version 1.5.90, execute_code() in praisonai-agents runs attacker-controlled Pyth

10.0CRITICAL

CVE-2026-34937

< 1.5.90

PraisonAI is a multi-agent teams system. Prior to version 1.5.90, run_python() in praisonai constructs a shell command string by i

7.8HIGH