praisonai
python · praisonaiCritical
praisonai AgentOS FastAPI routes remain unauthenticated after GHSA-pm96-6xpr-978x patch
AgentOS FastAPI deployment surface remains unauthenticated after the published patched version for GHSA-pm96-6xpr-978x.
19 Jun 2026 · act now
python · praisonaiCritical
PraisonAI multiedit tool allows arbitrary file read/write
The `multiedit` tool in `src/praisonai/praisonai/tools/multiedit.
19 Jun 2026 · act now
python · praisonaiCritical
praisonai: PRAISONAI_CALL_AUTH=disabled disables authentication on invoke endpoint
Setting PRAISONAI_CALL_AUTH=disabled completely disables authentication on the /api/v1/agents/{id}/invoke endpoint, allowing unaut
19 Jun 2026 · act now
python · praisonaiCritical
praisonai: SandlockSandbox silently falls back to SubprocessSandbox when Landlock unavailable
SandlockSandbox.execute() and run_command() silently fall back to SubprocessSandbox when Landlock is unavailable, bypassing filesy
19 Jun 2026 · act now