praisonaiagents Known Vulnerabilities & Fixes
praisonaiagents has 10 known security vulnerabilities in PyPI (Python). Upgrade to version 1.6.78 or later to resolve all known issues. Data sourced from OSV, enriched with EPSS exploit probability and CISA KEV.
Low Immediate Risk
No actively exploited vulnerabilities detected. Monitor and update in your next maintenance window.
Recommended safe version: 1.6.78
Upgrading to 1.6.78 or later resolves all 10 known vulnerabilities in praisonaiagents. Run: pip install "praisonaiagents>=1.6.78"
Is praisonaiagents in your project?
Check if you're affected and upgrade to 1.6.78 to stay secure.
Security Summary
- 10 affected version ranges have been identified across these 10 advisories.
- 100% of known issues have a published fixed version.
- Remediation: pip install --upgrade praisonaiagents
Vulnerabilities
10 unique vulnerabilities — sorted by exploitation risk (KEV → EPSS → CVSS). Click a CVE/GHSA ID for full details. First disclosed Apr 1, 2026, most recently Oct 8, 2026 (190 days apart).
| CVE / GHSA | Severity | Affected | Fixed In |
|---|---|---|---|
| CVE-2026-40289 PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+515 more) | 1.5.140 |
| CVE-2026-61447 PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+600 more) | 1.6.78 |
| CVE-2026-47392 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode) | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+564 more) | 1.6.40 |
| CVE-2026-34938 PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+465 more) | 1.5.90 |
| CVE-2026-57125 PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+582 more) | 1.6.59 |
| CVE-2026-40288 PraisonAI has critical RCE via `type: job` workflow YAML | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+515 more) | 1.5.140 |
| CVE-2026-39888 PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode) | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+490 more) | 1.5.115 |
| CVE-2026-57118 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+582 more) | 1.6.59 |
| CVE-2026-57123 PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+582 more) | 1.6.59 |
| CVE-2026-44335 PraisonAI has an SSRF bypass | HIGH | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+556 more) | 1.6.32 |
About This Data
Vulnerability data for praisonaiagents is sourced from the Open Source Vulnerability (OSV) database, aggregating reports from GitHub Advisory Database, NIST NVD, and ecosystem-specific sources.
CVSS (Common Vulnerability Scoring System) scores reflect exploitability and impact. EPSS (Exploit Prediction Scoring System) scores indicate the probability of exploitation within the next 30 days. Vulnerabilities marked with are listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
Related PyPI (Python) Packages
Other packages in this ecosystem, ranked by shared vulnerabilities where available.
Check Your Dependencies
Scan your project to check if you're using a vulnerable version of praisonaiagents.