CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,080 CVEs published, 233 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,080
Show in the list
Critical, last 7 days
233
Show in the list
Healthcare-tagged, last 7 days
10
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product mervinpraison:praisonai. Show all products

147 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-57117High 8.8PraisonAI: Compute-bridged file tools allow shell command injection
Assigned by GitHub_M
Oct 23, 2026
CVE-2026-57146High 7.5PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default
Assigned by GitHub_M
Oct 23, 2026
CVE-2026-57144High 8.8PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable
Assigned by GitHub_M
Oct 23, 2026
CVE-2026-57142High 7.8PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml
Assigned by GitHub_M
Oct 23, 2026
CVE-2026-57121High 8.1PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API
Assigned by GitHub_M
Oct 23, 2026
CVE-2026-57116Critical 9.8PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation
Assigned by GitHub_M
Oct 23, 2026
CVE-2026-57114High 7.2PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding
Assigned by GitHub_M
Oct 23, 2026
CVE-2026-57113High 8.1PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion
Assigned by GitHub_M
Oct 23, 2026
CVE-2026-56840High 8.8PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools
Assigned by GitHub_M
Oct 23, 2026
CVE-2026-56838High 7.8PraisonAI recipe.run_stream skips dangerous-tool policy enforcement
Assigned by GitHub_M
Oct 23, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.