GHSA-h2w2-v7j6-xqm4
High · 8.8CVSS
8.8
EPSS
—
Published
Jun 18, 2026
CISA due date
—
The record
npm PraisonAI AgentLoop onToolCall approval runs after tool execution
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | praisonai | 1.4.0 | 1.7.2 |
Related vulnerabilities
- GHSA-5jv7-2mjm-h6qj npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining Also affects praisonai
- GHSA-j4f3-55x4-r6q2 npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call Also affects praisonai
- GHSA-9752-mhqh-h34f npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation Also affects praisonai
- GHSA-p69m-4f92-2v84 PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool Also affects praisonai
- GHSA-vjv9-7m7j-h833 npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining Also affects praisonai
- GHSA-vmmj-pfw7-fjwp npm PraisonAI codeMode sandbox escape via Function constructor Also affects praisonai
- GHSA-gqmf-56h7-rrpf npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware… Also affects praisonai
- GHSA-4qq2-2j2x-x62c npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials… Also affects praisonai