PraisonAI
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 50 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 10, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery
praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
PraisonAI AgentOS exposes unauthenticated agent listing and invocation
PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients
PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool
PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools
PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication
PraisonAI UI MCP connect endpoint allows unauthenticated local command execution
praisonai: recipe serve auth middleware silently disables itself when no secret is set
Monitor PraisonAI in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.