Vulnerabilities in MervinPraison
178 resultsCVE-2026-44337MEDIUMPraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queriesEPSS 0.2%CVE-2026-56835HIGHPraisonAI Slack app_mention bypasses configured user/channel authorizationEPSS 0.2%CVE-2026-61433HIGHPraisonAI before 4.6.78 Code Injection via API deployment generatorEPSS 0.2%CVE-2026-40156HIGHPraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` LoadingEPSS 0.2%CVE-2026-57144HIGHPraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailableEPSS 0.2%CVE-2026-60089MEDIUMPraisonAI before 1.6.78 Path Traversal via config.tomlEPSS 0.2%CVE-2026-55532HIGHPraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP serverEPSS 0.2%CVE-2026-61437HIGHPraisonAI before 1.6.78 Remote Code Execution via tools.pyEPSS 0.2%CVE-2026-57122HIGHPraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)EPSS 0.2%CVE-2026-56837HIGHPraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missingEPSS 0.2%CVE-2026-47395MEDIUMPraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model contextEPSS 0.2%CVE-2026-40159MEDIUMPraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess ExecutionEPSS 0.2%CVE-2026-62179MEDIUMPraisonAI: Platform members can delete owner issue dependencies through member-owned related issuesEPSS 0.2%CVE-2026-47390MEDIUMPraisonAI spider_tools SSRF protection bypass via alternate loopback host encodingsEPSS 0.2%CVE-2026-55529MEDIUMPraisonAI: Origin validation bypass in MCP HTTP Stream transport allows browser-mediated unauthenticated tool execution on local MCP serverEPSS 0.2%CVE-2026-55530MEDIUMPraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation toolEPSS 0.2%CVE-2026-56832HIGHPraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvalsEPSS 0.1%CVE-2026-56838HIGHPraisonAI recipe.run_stream skips dangerous-tool policy enforcementEPSS 0.1%