Praison
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 53 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 1, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`
PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute
PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution
PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries
PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection
Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI
PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)
PraisonAI: Unauthenticated RCE via `tool_override.py`
SSRF bypass in PraisonAI
PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence
Monitor Praison in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.