Skip to content

cveboard RSS feed

MervinPraison

Thursday, October 8
- GitHub CVE-2026-61447
  PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets
  - MervinPraison PraisonAI
  - Critical
  - CVSS 10.0
  - EPSS 2.49%
  - Fixed version listed
  16:44 UTC
- GitHub CVE-2026-61445
  PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls
  - MervinPraison PraisonAI
  - Critical
  - CVSS 9.9
  - EPSS 0.88%
  - Fixed version listed
  22:00 UTC
Wednesday, October 7
- GitHub CVE-2026-62176
  PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation
  - MervinPraison PraisonAI
  - Critical
  - CVSS 9.1
  - EPSS 0.46%
  - Fixed version listed
  16:05 UTC