rainbutterfly/cve_corpus huggingface dataset:
CVE-2026-34908 
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control - Generic
Affected products: vendor: Ubiquiti Inc
product: UniFi OS Server
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-SE
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Pro-Max
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Beast
default_status: unaffected
vendor: Ubiquiti Inc
product: EFG
default_status: unaffected
vendor: Ubiquiti Inc
product: UDW
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR7
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR-5G
default_status: unaffected
vendor: Ubiquiti Inc
product: Express 7
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-Instant
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-G2
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-G2-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: ENVR
default_status: unaffected
vendor: Ubiquiti Inc
product: ENVR-Core
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-2
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-4
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro-4
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro-8
default_status: unaffected
vendor: Ubiquiti Inc
product: UCKP
default_status: unaffected
vendor: Ubiquiti Inc
product: UCK
default_status: unaffected
vendor: Ubiquiti Inc
product: UCK-Enterprise
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Ultra
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Max
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Fiber
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Industrial
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
baseScore: 10
baseSeverity: CRITICAL
Published: 2026-05-22T00:43:49.077Z
CVE-2026-34909 
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
Problem types: cwe_id: CWE-22
description: CWE-22 Path Traversal
Affected products: vendor: Ubiquiti Inc
product: UniFi OS Server
default_status: unaffected
vendor: Ubiquiti Inc
product: Express
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-SE
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Pro-Max
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Beast
default_status: unaffected
vendor: Ubiquiti Inc
product: EFG
default_status: unaffected
vendor: Ubiquiti Inc
product: UDW
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR7
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR-5G
default_status: unaffected
vendor: Ubiquiti Inc
product: Express 7
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-Instant
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-G2
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-G2-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: ENVR
default_status: unaffected
vendor: Ubiquiti Inc
product: ENVR-Core
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-2
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-4
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro-4
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro-8
default_status: unaffected
vendor: Ubiquiti Inc
product: UCKP
default_status: unaffected
vendor: Ubiquiti Inc
product: UCK
default_status: unaffected
vendor: Ubiquiti Inc
product: UCK-Enterprise
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Ultra
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Max
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Fiber
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Industrial
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
baseScore: 10
baseSeverity: CRITICAL
Published: 2026-05-22T00:43:49.072Z
CVE-2026-34910 
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Ubiquiti Inc
product: UniFi OS Server
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-SE
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Pro-Max
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Beast
default_status: unaffected
vendor: Ubiquiti Inc
product: EFG
default_status: unaffected
vendor: Ubiquiti Inc
product: UDW
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR7
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR-5G
default_status: unaffected
vendor: Ubiquiti Inc
product: Express 7
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-Instant
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-G2
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-G2-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: ENVR
default_status: unaffected
vendor: Ubiquiti Inc
product: ENVR-Core
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-2
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-4
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro-4
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro-8
default_status: unaffected
vendor: Ubiquiti Inc
product: UCKP
default_status: unaffected
vendor: Ubiquiti Inc
product: UCK
default_status: unaffected
vendor: Ubiquiti Inc
product: UCK-Enterprise
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Ultra
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Max
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Fiber
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Industrial
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
baseScore: 10
baseSeverity: CRITICAL
Published: 2026-05-22T00:43:49.096Z
CVE-2026-34911 
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
Problem types: cwe_id: CWE-22
description: CWE-22 Path Traversal
Affected products: vendor: Ubiquiti Inc
product: UniFi OS Server
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-SE
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Pro-Max
default_status: unaffected
vendor: Ubiquiti Inc
product: UDM-Beast
default_status: unaffected
vendor: Ubiquiti Inc
product: EFG
default_status: unaffected
vendor: Ubiquiti Inc
product: UDW
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR7
default_status: unaffected
vendor: Ubiquiti Inc
product: UDR-5G
default_status: unaffected
vendor: Ubiquiti Inc
product: Express 7
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-Instant
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-G2
default_status: unaffected
vendor: Ubiquiti Inc
product: UNVR-G2-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: ENVR
default_status: unaffected
vendor: Ubiquiti Inc
product: ENVR-Core
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-2
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-4
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro-4
default_status: unaffected
vendor: Ubiquiti Inc
product: UNAS-Pro-8
default_status: unaffected
vendor: Ubiquiti Inc
product: UCKP
default_status: unaffected
vendor: Ubiquiti Inc
product: UCK
default_status: unaffected
vendor: Ubiquiti Inc
product: UCK-Enterprise
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Ultra
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Max
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Fiber
default_status: unaffected
vendor: Ubiquiti Inc
product: UCG-Industrial
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
baseScore: 7.7
baseSeverity: HIGH
Published: 2026-05-22T00:43:49.189Z
CVE-2026-34926 
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.


This vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.
Problem types: cwe_id: CWE-23
description: CWE-23: Relative Path Traversal
Affected products: vendor: Trend Micro, Inc.
product: TrendAI Apex One
cpes: cpe:2.3:a:trendmicro:apexone_op:14.0.0.17079:*:*:*:*:*:*:*
vendor: Trend Micro, Inc.
product: TrendAI Apex One as a Service
cpes: cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20731:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: MEDIUM
baseScore: 6.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L
Published: 2026-05-21T13:03:21.164Z
CVE-2026-34927 
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: cwe_id: CWE-346
description: CWE-346: Origin Validation Error
Affected products: vendor: Trend Micro, Inc.
product: TrendAI Apex One
cpes: cpe:2.3:a:trendmicro:apexone_op:14.0.0.17079:*:*:*:*:*:*:*
vendor: Trend Micro, Inc.
product: TrendAI Apex One as a Service
cpes: cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20731:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-05-21T13:03:31.141Z
CVE-2026-34928 
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: cwe_id: CWE-346
description: CWE-346: Origin Validation Error
Affected products: vendor: Trend Micro, Inc.
product: TrendAI Apex One
cpes: cpe:2.3:a:trendmicro:apexone_op:14.0.0.17079:*:*:*:*:*:*:*
vendor: Trend Micro, Inc.
product: TrendAI Apex One as a Service
cpes: cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20731:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-05-21T13:03:39.339Z
CVE-2026-34929 
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: cwe_id: CWE-346
description: CWE-346: Origin Validation Error
Affected products: vendor: Trend Micro, Inc.
product: TrendAI Apex One
cpes: cpe:2.3:a:trendmicro:apexone_op:14.0.0.17079:*:*:*:*:*:*:*
vendor: Trend Micro, Inc.
product: TrendAI Apex One as a Service
cpes: cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20731:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-05-21T13:03:50.529Z
CVE-2026-34930 
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: cwe_id: CWE-346
description: CWE-346: Origin Validation Error
Affected products: vendor: Trend Micro, Inc.
product: TrendAI Apex One
cpes: cpe:2.3:a:trendmicro:apexone_op:14.0.0.17079:*:*:*:*:*:*:*
vendor: Trend Micro, Inc.
product: TrendAI Apex One as a Service
cpes: cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20731:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-05-21T13:04:02.090Z
CVE-2026-34931 hoppscotch: Improper loopback redirect_uri validation in device-login flow
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is an open redirect vulnerability that leads to token exfiltration. With these tokens, the attacker can sign in as the victim to takeover their account. This issue has been patched in version 2026.3.0.
Problem types: cwe_id: CWE-601
description: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: hoppscotch
product: hoppscotch
Published: 2026-04-02T19:21:35.136Z
CVE-2026-34932 hoppscotch: Stored XSS via mock server responses on backend origin
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability that can lead to CSRF. This issue has been patched in version 2026.3.0.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: hoppscotch
product: hoppscotch
Published: 2026-04-02T19:19:15.697Z
CVE-2026-34933 Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.
Problem types: cwe_id: CWE-617
description: CWE-617: Reachable Assertion
Affected products: vendor: avahi
product: avahi
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2026-04-03T22:43:26.683Z
CVE-2026-34934 PraisonAI: Second-Order SQL Injection in `get_all_user_threads`
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, the get_all_user_threads function constructs raw SQL queries using f-strings with unescaped thread IDs fetched from the database. An attacker stores a malicious thread ID via update_thread. When the application loads the thread list, the injected payload executes and grants full database access. This issue has been patched in version 4.5.90.
Problem types: cwe_id: CWE-89
description: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MervinPraison
product: PraisonAI
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-04-03T22:49:12.947Z
CVE-2026-34935 PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()
PraisonAI is a multi-agent teams system. From version 4.5.15 to before version 4.5.69, the --mcp CLI argument is passed directly to shlex.split() and forwarded through the call chain to anyio.open_process() with no validation, allowlist check, or sanitization at any hop, allowing arbitrary OS command execution as the process user. This issue has been patched in version 4.5.69.
Problem types: cwe_id: CWE-78
description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: MervinPraison
product: PraisonAI
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-04-03T22:48:21.261Z
CVE-2026-34936 PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, passthrough() and apassthrough() in praisonai accept a caller-controlled api_base parameter that is concatenated with endpoint and passed directly to httpx.Client.request() when the litellm primary path raises AttributeError. No URL scheme validation, private IP filtering, or domain allowlist is applied, allowing requests to any host reachable from the server. This issue has been patched in version 4.5.90.
Problem types: cwe_id: CWE-918
description: CWE-918: Server-Side Request Forgery (SSRF)
Affected products: vendor: MervinPraison
product: PraisonAI
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
version: 3.1
Published: 2026-04-03T22:50:04.922Z
CVE-2026-34937 PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution
PraisonAI is a multi-agent teams system. Prior to version 1.5.90, run_python() in praisonai constructs a shell command string by interpolating user-controlled code into python3 -c "<code>" and passing it to subprocess.run(..., shell=True). The escaping logic only handles \ and ", leaving $() and backtick substitutions unescaped, allowing arbitrary OS command execution before Python is invoked. This issue has been patched in version 1.5.90.
Problem types: cwe_id: CWE-78
description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: MervinPraison
product: PraisonAI
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-04-03T22:50:48.913Z
CVE-2026-34938 PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code
PraisonAI is a multi-agent teams system. Prior to version 1.5.90, execute_code() in praisonai-agents runs attacker-controlled Python inside a three-layer sandbox that can be fully bypassed by passing a str subclass with an overridden startswith() method to the _safe_getattr wrapper, achieving arbitrary OS command execution on the host. This issue has been patched in version 1.5.90.
Problem types: cwe_id: CWE-693
description: CWE-693: Protection Mechanism Failure
Affected products: vendor: MervinPraison
product: PraisonAI
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2026-04-03T22:51:28.199Z
CVE-2026-34939 PraisonAI: ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.
Problem types: cwe_id: CWE-1333
description: CWE-1333: Inefficient Regular Expression Complexity
Affected products: vendor: MervinPraison
product: PraisonAI
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2026-04-03T22:52:32.763Z