PraisonAI vulnerabilities
We track 3 vulnerabilities in PraisonAI products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 18, 2026.
Latest PraisonAI vulnerabilities
- 8.8 High severity
PraisonAI: Improper Limitation of a Pathname to a Restricted Directory
PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabl
- 8.1 High severity
PraisonAI: Permissive Cross-domain Security Policy with Untrusted Domains
PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution. The POST /agui endpoint lacks authentication and hardcodes Access-Control-Allow-Origin: * hea
- 8.8 High severity
PraisonAI: Incorrect Authorization
PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment variable. Authenticated attackers can instru