CVE Notifier

CVE-2026-52825 CWE-285 N/A

Kimai: Improper Authorization in Kimai Team Member and Team Activity Assignment APIs Allows Expansion of Team Scope Beyond Authorized Visibility

Kimai is an open-source time tracking application. Prior to 2.58.0, POST /api/teams/{id}/members/{userId} and POST /api/teams/{id}/activities/{activityId} verify that a teamlead may edit the Team but do not verify access…

cve.org kimai:kimai 15 Sep 2026

CVE-2026-52821 CWE-639 N/A

Kimai: Improper Authorization in Kimai Activity Creation with Preset Project Allows Creation Under Unauthorized Projects

Kimai is an open-source time tracking application. Prior to 2.57.0, GET or POST requests to /en/admin/activity/create/{project} and /en/admin/project/create/{customer} require only the generic create_activity or create_p…

cve.org kimai:kimai 15 Sep 2026

CVE-2026-52820 CWE-639 N/A

Kimai: Timesheet PATCH/POST allows assigning to project outside user's team via query_builder OR-bypass

Kimai is an open-source time tracking application. Prior to 2.57.0, PATCH /api/timesheets/{id} and POST /api/timesheets accept a user-controlled project identifier through TimesheetApiEditForm and FormTrait, and ProjectR…

cve.org kimai:kimai 15 Sep 2026

CVE-2026-52819 CWE-863 N/A

Kimai: Teamlead authorization bypass in GET /api/timesheets allows reading other users' timesheet records without being teamlead of the target

Kimai is an open-source time tracking application. Prior to 2.57.0, the GET /api/timesheets list endpoint accepts user and users[] target identifiers from a caller with view_other_timesheet but does not apply access_user…

cve.org kimai:kimai 15 Sep 2026

CVE-2026-57147 CWE-798 9.8

praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py assigns the public dev-secret-change-me value to JWT_SECRET when PLATFORM_JWT_SECRET is unset, and its production guard…

cve.org MervinPraison:PraisonAI · MervinPraison:praisonai-platform 15 Sep 2026

CVE-2026-57148 CWE-287 9.8

praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the public dev-secret-change-me HS256 signing key when PLATFORM_JWT_SECRET is unset, while the startup an…

cve.org MervinPraison:PraisonAI · MervinPraison:praisonai-platform 15 Sep 2026

CVE-2026-86472 CWE-178 4.8

fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets

fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv. In versions before 2.4.7, from 3.0.0 through 3.1.7, and from 4.0.0 through 4.1.4, fast-uri folds the host to lowercase before it per…

cve.org fast-uri:fast-uri 15 Sep 2026

CVE-2026-57140 CWE-306 9.4

PraisonAI AgentOS exposes unauthenticated agent listing and invocation

PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and registers GET /api/agents and POST /api/c…

cve.org MervinPraison:PraisonAI 15 Sep 2026

CVE-2026-57139 CWE-306 9.8

PraisonAI MCPServer exposes unauthenticated HTTP tools/call

PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPServer.startHttp() in src/praisonai-ts/src/mcp/server.ts binds without a host restriction and forwards every HTTP POST request to handleRequest() withou…

cve.org MervinPraison:PraisonAI 15 Sep 2026

CVE-2026-57133 CWE-78 8.8

PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from src/praisonai-ts/src/tools/utility-tools.ts checks only the first whitespace-delimited token against safeCommands and then…

cve.org MervinPraison:PraisonAI 15 Sep 2026

CVE-2026-57135 CWE-653 7.6

PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-ts/src/cli/features/sandbox-executor.ts uses buildEnv() only to inject invalid http_proxy and https_…

cve.org MervinPraison:PraisonAI 15 Sep 2026

CVE-2026-57134 CWE-287 8.2

PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer.…

cve.org MervinPraison:PraisonAI 15 Sep 2026