praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}

CVE-2026-47416

## Summary **Type:** Vertical privilege escalation. The `PATCH /workspaces/{workspace_id}/members/{user_id}` endpoint i

历史摘要 · 未重新核验 · GitHub Advisory

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-0257

2026年5月29日，美国网络安全和基础设施安全局（CISA）将一个新的漏洞CVE-2026-0257添加到其已知被利用漏洞（KEV）目录中，原因是存在主动利用的证据。该漏洞是Palo Alto Networks PAN-OS的身份验证绕过

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)

CVE-2026-0250

Palo Alto Networks 发布了关于 GlobalProtect App 中一个缓冲区溢出漏洞的安全公告（CVE-2026-0250）。该漏洞存在于 GlobalProtect App 连接到 Portal 或 Gateway

历史摘要 · 未重新核验 · Palo Alto Security Advisories

Threat IntelligenceExploitation of KnowledgeDeliver via ViewState Deserialization VulnerabilityBy Mandiant • 7-minute read

Mandiant 于 2026 年 5 月发布报告，揭露了一起利用 ViewState 反序列化漏洞针对 KnowledgeDeliver 的攻击活动。ViewState 是 ASP.NET 中用于保持页面状态的一种机制，若其序列化数据未经

历史摘要 · 未重新核验 · Mandiant

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could...

CVE-2026-9831

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-c

历史摘要 · 未重新核验 · GitHub Advisory

praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role

CVE-2026-47409

## Summary **Type:** Authorization bypass enabling owner lockout. The `DELETE /workspaces/{workspace_id}/members/{user_

历史摘要 · 未重新核验 · GitHub Advisory

praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link)

CVE-2026-47414

## Summary **Type:** Insecure Direct Object Reference. Five label endpoints — `PATCH /workspaces/{workspace_id}/labels/

历史摘要 · 未重新核验 · GitHub Advisory

praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks

CVE-2026-47406

## Summary **Type:** Insecure Direct Object Reference. The dependency endpoints (`POST/GET /workspaces/{workspace_id}/i

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID

CVE-2026-47399

### Summary PraisonAI Platform's workspace-scoped REST routes contain a systemic object-level authorization flaw that a

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation

CVE-2026-47407

## Summary The Platform server exposes resources under `/api/v1/workspaces/{workspace_id}/...` and protects them with a

历史摘要 · 未重新核验 · GitHub Advisory

praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership

CVE-2026-47408

## Summary **Type:** Insecure Direct Object Reference. The `GET /workspaces/{workspace_id}/issues/{issue_id}/activity`

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API

CVE-2026-48169

### Summary The PraisonAI Platform API has two authorization failures that together break workspace isolation. The serv

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

CVE-2026-47391

## Summary The first-party PraisonAI A2A server example combines three behaviors into a remotely exploitable Critical c

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

CVE-2026-47396

### Summary PraisonAI's call server exposes a network-facing agent control API without authentication when `CALL_SERVER

历史摘要 · 未重新核验 · GitHub Advisory

CC-Tweaked has an SSRF Protection Bypass with NAT64

CVE-2026-47695

### Summary CC-Tweaked's HTTP API (`http.request`, `http.websocket`) blocks requests to private network ranges to preve

历史摘要 · 未重新核验 · GitHub Advisory

zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood

CVE-2026-47184

### Impact `DNSCache._async_add` inserted every response record into `cache`, `_expirations`, `_expire_heap`, and `serv

历史摘要 · 未重新核验 · GitHub Advisory

zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion

CVE-2026-47183

### Impact `DNSIncoming._log_exception_debug` and the four `QuietLogger` exception-dedup methods stored an unbounded `_s

历史摘要 · 未重新核验 · GitHub Advisory

zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service

CVE-2026-47180

### Impact `DNSIncoming._decode_labels_at_offset` recurses once per DNS-name compression pointer (RFC 1035 §4.1.4). Poi

历史摘要 · 未重新核验 · GitHub Advisory

amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection

CVE-2026-8838

### Summary amazon-redshift-python-driver is the official Python connector for Amazon Redshift. In versions 2.1.13 and e

历史摘要 · 未重新核验 · GitHub Advisory

Ivanti Endpoint Manager Mobile代码注入漏洞

Ivanti Endpoint Manager Mobile代码注入漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug