CVE Notifier

CVE-2026-57138 CWE-184 9.9

PraisonAI codeMode sandbox escape via Function constructor

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript with new Function() inside with(sandbox) and relies on a small s…

cve.org MervinPraison:PraisonAI 15 Sep 2026

CVE-2026-57136 CWE-78 8.8

PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/sandbox-executor.ts validates only the first whitespace-delimited executable against allowedCommands,…

cve.org MervinPraison:PraisonAI 15 Sep 2026

CVE-2026-57137 CWE-693 8.8

PraisonAI AgentLoop onToolCall approval runs after tool execution

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText() before invoking the onToolCall approval callback. Beca…

cve.org MervinPraison:PraisonAI 15 Sep 2026

CVE-2026-57141 CWE-94 9.8

PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

PraisonAI is a multi-agent teams system. Prior to 1.7.2, the codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts executes model-generated JavaScript with new Function() and with(sandbox), while a regular-ex…

cve.org MervinPraison:PraisonAI 15 Sep 2026

CVE-2026-57112 CWE-306 8.3

PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools

PraisonAI is a multi-agent teams system. From praisonaiagents 0.6.0 until 1.6.59 and PraisonAI 3.10.0 until 4.6.59, ToolsMCPServer.run_sse() in src/praisonai-agents/praisonaiagents/mcp/mcp_server.py mounts SseServerTrans…

cve.org MervinPraison:PraisonAI · MervinPraison:praisonaiagents 15 Sep 2026

CVE-2026-48717 CWE-285 N/A

OpenAM OAuth Authorization Bypass via PKCE Challenge

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a code_verifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an…

cve.org OpenIdentityPlatform:OpenAM 15 Sep 2026

CVE-2026-47426 CWE-287 N/A

OpenAM OAuth Client Impersonation via JWKS Resolver Cache

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the private_key_jwt client authentication path uses ClientJwksResolverCache without reliably binding a cached jwks_uri resolver and verif…

cve.org OpenIdentityPlatform:OpenAM 15 Sep 2026

CVE-2026-47424 CWE-693 N/A

OpenAM Authenticated RCE via Groovy Sandbox Escape

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class all…

cve.org OpenIdentityPlatform:OpenAM 15 Sep 2026

CVE-2026-41573 CWE-90 N/A

OpenAM LDAP Injection via `_queryId` Parameter

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection() passes the _queryId parameter from /json/{realm}/users to CrestQuery with escapeQueryId disabled, by…

cve.org OpenIdentityPlatform:OpenAM 15 Sep 2026

CVE-2026-62280 CWE-79 6.1

OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page

Open Access Management (OpenAM) is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoint's display=wap consent page reflects request-derived values through ConsentRequiredResource and wap…

cve.org OpenIdentityPlatform:OpenAM 15 Sep 2026

CVE-2025-13166 CWE-203 3.7

Username Enumeration via SMS OTP Flow in WSO2 Identity Server Allows User Account Discovery

The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received during the OTP initiation process. This weakness can be…

cve.org WSO2:WSO2 · Identity · Server 15 Sep 2026

CVE-2025-5802 CWE-203 5.3

Username Enumeration via Self Registration Flow in Multiple WSO2 Products Allows User Account Discovery

The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts to register with an existing username, the system responds wit…

cve.org WSO2:WSO2 · API · Manager 15 Sep 2026