praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership
CVE-2026-47408
## Summary **Type:** Insecure Direct Object Reference. The `GET /workspaces/{workspace_id}/issues/{issue_id}/activity`
#pip
共收录 834 条相关情报。
← 返回所有主题PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API
CVE-2026-48169
### Summary The PraisonAI Platform API has two authorization failures that together break workspace isolation. The serv
PraisonAI has an Arbitrary File Write in Python API
CVE-2026-47397
# Bug Report: Arbitrary File Write in Python API ## Summary Hidden metadata in a webpage causes PraisonAI agents to wr
PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution
CVE-2026-47391
## Summary The first-party PraisonAI A2A server example combines three behaviors into a remotely exploitable Critical c
PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate
CVE-2026-47394
## Summary The fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four
PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)
CVE-2026-47392
## Summary `execute_code()` in `praisonaiagents/tools/python_tools.py` (v1.6.37, subprocess sandbox mode) can be fully
PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context
CVE-2026-47395
### Summary PraisonAI's direct-prompt CLI automatically expands `@url:` mentions in raw prompt text before agent execut
PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default
CVE-2026-47393
### Summary CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-generator (`praisonai.deploy.api
PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset
CVE-2026-47396
### Summary PraisonAI's call server exposes a network-facing agent control API without authentication when `CALL_SERVER
PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings
CVE-2026-47390
### Summary PraisonAI's `spider_tools` URL validation can be bypassed using alternate loopback host encodings. The aff
PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334
CVE-2026-47398
Arbitrary code execution via ungated spec.loader.exec_module in agents_generator.py (v4.6.32 chokepoint refactor bypass)
stigmem-node's federation peer registration lacked explicit out-of-band approval
### Impact Federation peer registration accepted peer key material during registration without a separate administrator
stigmem-node's unsigned plugin override could be enabled without a second explicit acknowledgment
### Impact A single configuration flag could disable plugin signature enforcement. If an operator unintentionally carrie
stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation
### Impact Stigmem nodes with federation enabled could be configured to run without mTLS outside loopback-only local dev
stigmem-node's Postgres schema identifier handling required defensive quoting
### Impact Postgres backend schema identifiers were interpolated into SQL strings. In the reviewed code path the schema
stigmem-node's federation peer token timestamp validation may reject valid peer tokens
### Impact A mismatch in federation peer-token timestamp handling could cause valid peer tokens to be treated as expired
stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback
### Impact Stigmem nodes configured with authentication disabled could grant the anonymous identity broad read/write/fed
BoxLite has a Timeout Bypass Vulnerability
CVE-2026-47213
#### Summary BoxLite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and run OCI
ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env
CVE-2026-47211
### Impact A Remote Code Execution (RCE) vulnerability was discovered in Ouroboros. If a user clones a malicious reposit
zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood
CVE-2026-47184
### Impact `DNSCache._async_add` inserted every response record into `cache`, `_expirations`, `_expire_heap`, and `serv