漏洞公告

npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call

npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation

PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

npm PraisonAI codeMode sandbox escape via Function constructor

npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients

npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation

PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters

PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode

Heimdall: IP Spoofing via Unvalidated Forwarding Headers

PraisonAI Code agent tools fail open without a workspace boundary

PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai

PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)

PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API

PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation

PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding

PraisonAI: Jobs API exposes agent-execution endpoints with no authentication

PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

praisonai: recipe serve auth middleware silently disables itself when no secret is set

praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass