Skip to content
Threat Feed
Subscribe

Product

Praisonaiagents

3 briefs RSS
high advisory

Arbitrary File Write Vulnerability in PraisonAI Agents

The FileMemory component in praisonaiagents versions 1.6.52 and earlier fails to sanitize user-supplied identifiers, enabling path traversal attacks that result in arbitrary JSON file creation or overwriting.

praisonaiagents vulnerability path-traversal python ssrf cloud-security authentication-bypass insecure-design api-security
5t 1c
high advisory

PraisonAI SSRF Vulnerability via URL Parsing Discrepancy

PraisonAI versions 1.6.31 and earlier contain a Server-Side Request Forgery (SSRF) vulnerability due to inconsistent URL parsing between the application's validation logic and the underlying requests library, allowing attackers to bypass intended security checks and access internal resources.

praisonaiagents ssrf praisonai vulnerability
2r 1t
critical advisory

PraisonAI Workflow Engine Vulnerability CVE-2026-40288

PraisonAI versions before 4.5.139 and praisonaiagents versions before 1.5.140 are vulnerable to arbitrary command execution via untrusted YAML files processed by the workflow engine.

PraisonAI +1 yaml code-execution cve-2026-40288
2r 1t 1c