Skip to content
Threat Feed
Subscribe

Product

Praisonaiagents

2 briefs RSS
high advisory

PraisonAI SSRF Vulnerability via URL Parsing Discrepancy

PraisonAI versions 1.6.31 and earlier contain a Server-Side Request Forgery (SSRF) vulnerability due to inconsistent URL parsing between the application's validation logic and the underlying requests library, allowing attackers to bypass intended security checks and access internal resources.

praisonaiagents ssrf praisonai vulnerability
2r 1t
critical advisory

PraisonAI Workflow Engine Vulnerability CVE-2026-40288

PraisonAI versions before 4.5.139 and praisonaiagents versions before 1.5.140 are vulnerable to arbitrary command execution via untrusted YAML files processed by the workflow engine.

PraisonAI +1 yaml code-execution cve-2026-40288
2r 1t 1c