praisonaiagents Security Analysis
praisonaiagents has 16 known security vulnerabilities in PyPI (Python). Upgrade to version 1.6.59 or later to resolve all known issues. Data sourced from OSV, enriched with EPSS exploit probability and CISA KEV.
Low Immediate Risk
No actively exploited vulnerabilities detected. Monitor and update in your next maintenance window.
Recommended safe version: 1.6.59
Upgrading to 1.6.59 or later resolves all 16 known vulnerabilities in praisonaiagents. Run: pip install "praisonaiagents>=1.6.59"
Is praisonaiagents in your project?
Check if you're affected and upgrade to 1.6.59 to stay secure.
Vulnerabilities
16 unique vulnerabilities — sorted by exploitation risk (KEV → EPSS → CVSS). Click a CVE/GHSA ID for full details.
| CVE / GHSA | Severity | Affected | Fixed In |
|---|---|---|---|
| CVE-2026-47392 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode) | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+564 more) | 1.6.40 |
| CVE-2026-34938 PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+465 more) | 1.5.90 |
| CVE-2026-57125 PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+582 more) | 1.6.59 |
| CVE-2026-40288 PraisonAI has critical RCE via `type: job` workflow YAML | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+515 more) | 1.5.140 |
| CVE-2026-34938 PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+465 more) | 1.5.90 |
| CVE-2026-47392 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode) | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+564 more) | 1.6.40 |
| CVE-2026-39888 PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode) | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+490 more) | 1.5.115 |
| CVE-2026-57118 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+582 more) | 1.6.59 |
| CVE-2026-57125 PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+582 more) | 1.6.59 |
| CVE-2026-57123 PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+582 more) | 1.6.59 |
| CVE-2026-39888 PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode) | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+490 more) | 1.5.115 |
| CVE-2026-40288 PraisonAI has critical RCE via `type: job` workflow YAML | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+515 more) | 1.5.140 |
| CVE-2026-57118 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+582 more) | 1.6.59 |
| CVE-2026-57123 PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+582 more) | 1.6.59 |
| CVE-2026-40289 PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+515 more) | 1.5.140 |
| CVE-2026-40289 PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions | CRITICAL | 0.0.1, 0.0.10, 0.0.100, 0.0.101 (+515 more) | 1.5.140 |
About This Data
Vulnerability data for praisonaiagents is sourced from the Open Source Vulnerability (OSV) database, aggregating reports from GitHub Advisory Database, NIST NVD, and ecosystem-specific sources.
CVSS (Common Vulnerability Scoring System) scores reflect exploitability and impact. EPSS (Exploit Prediction Scoring System) scores indicate the probability of exploitation within the next 30 days. Vulnerabilities marked with are listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
Related PyPI (Python) Packages
Other packages in this ecosystem, ranked by shared vulnerabilities where available.
Check Your Dependencies
Scan your project to check if you're using a vulnerable version of praisonaiagents.