https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 12 Jul 2026 03:00:30 +0000 https://vulnerability.circl.lu/sighting/a45bde89-2380-4072-833e-ad830e63918e/export {"uuid": "a45bde89-2380-4072-833e-ad830e63918e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61445", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqfzplj5gq2d", "content": "CVE-2026-61445: CRITICAL path traversal in PraisonAI (<4.6.78) enables file write & root command exec via chat. No patch \u2014 restrict access & monitor AICoder use. https://radar.offseq.com/threat/cve-2026-61445-improper-limitation-of-a-pathname-t-188171a28e18ac5b #OffSeq #CVE202661445 #security", "creation_timestamp": "2026-07-12T01:30:27.653941Z"} {"uuid": "a45bde89-2380-4072-833e-ad830e63918e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61445", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqfzplj5gq2d", "content": "CVE-2026-61445: CRITICAL path traversal in PraisonAI (<4.6.78) enables file write & root command exec via chat. No patch \u2014 restrict access & monitor AICoder use. https://radar.offseq.com/threat/cve-2026-61445-improper-limitation-of-a-pathname-t-188171a28e18ac5b #OffSeq #CVE202661445 #security", "creation_timestamp": "2026-07-12T01:30:27.653941Z"} https://vulnerability.circl.lu/sighting/a45bde89-2380-4072-833e-ad830e63918e/export Sun, 12 Jul 2026 01:30:27 +0000 https://vulnerability.circl.lu/sighting/7d6f42bf-51bc-40ca-9147-0510eaa07d58/export {"uuid": "7d6f42bf-51bc-40ca-9147-0510eaa07d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61445", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116904416043130640", "content": "CVE-2026-61445 (CRITICAL, CVSS 9.4): PraisonAI <4.6.78 suffers path traversal & command injection via AICoder chat. Attackers gain root, write files anywhere. Restrict access & monitor \u2014 no patch yet. https://radar.offseq.com/threat/cve-2026-61445-improper-limitation-of-a-pathname-t-188171a28e18ac5b #OffSeq #CVE202661445 #AIsecurity #infosec", "creation_timestamp": "2026-07-12T01:30:25.817607Z"} {"uuid": "7d6f42bf-51bc-40ca-9147-0510eaa07d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61445", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116904416043130640", "content": "CVE-2026-61445 (CRITICAL, CVSS 9.4): PraisonAI <4.6.78 suffers path traversal & command injection via AICoder chat. Attackers gain root, write files anywhere. Restrict access & monitor \u2014 no patch yet. https://radar.offseq.com/threat/cve-2026-61445-improper-limitation-of-a-pathname-t-188171a28e18ac5b #OffSeq #CVE202661445 #AIsecurity #infosec", "creation_timestamp": "2026-07-12T01:30:25.817607Z"} https://vulnerability.circl.lu/sighting/7d6f42bf-51bc-40ca-9147-0510eaa07d58/export Sun, 12 Jul 2026 01:30:25 +0000 https://vulnerability.circl.lu/sighting/01b6071c-98d4-4b27-97e0-731dd6b5e8e5/export {"uuid": "01b6071c-98d4-4b27-97e0-731dd6b5e8e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61445", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116902362630060993", "content": "The severity is increased for this new vulnerability affecting MervinPraison PraisonAI (CVE-2026-61445) https://vuldb.com/vuln/377824", "creation_timestamp": "2026-07-11T16:48:12.808719Z"} {"uuid": "01b6071c-98d4-4b27-97e0-731dd6b5e8e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61445", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116902362630060993", "content": "The severity is increased for this new vulnerability affecting MervinPraison PraisonAI (CVE-2026-61445) https://vuldb.com/vuln/377824", "creation_timestamp": "2026-07-11T16:48:12.808719Z"} https://vulnerability.circl.lu/sighting/01b6071c-98d4-4b27-97e0-731dd6b5e8e5/export Sat, 11 Jul 2026 16:48:12 +0000 https://vulnerability.circl.lu/sighting/27b1306b-79bb-4109-9614-f01532a00267/export {"uuid": "27b1306b-79bb-4109-9614-f01532a00267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqeymykhpb27", "content": "CVE-2026-61445 - PraisonAI before 4.6.78 Arbitrary File Write and Command Execution\nCVE ID : CVE-2026-61445\n \n Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilit...", "creation_timestamp": "2026-07-11T15:38:26.824317Z"} {"uuid": "27b1306b-79bb-4109-9614-f01532a00267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqeymykhpb27", "content": "CVE-2026-61445 - PraisonAI before 4.6.78 Arbitrary File Write and Command Execution\nCVE ID : CVE-2026-61445\n \n Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilit...", "creation_timestamp": "2026-07-11T15:38:26.824317Z"} https://vulnerability.circl.lu/sighting/27b1306b-79bb-4109-9614-f01532a00267/export Sat, 11 Jul 2026 15:38:26 +0000 https://vulnerability.circl.lu/sighting/1ce68737-d1e2-4384-ab2f-7bb9b4ba3736/export {"uuid": "1ce68737-d1e2-4384-ab2f-7bb9b4ba3736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61445", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqewjmvsdf2b", "content": "\ud83d\udd34 CVE-2026-61445 - Critical (9.9)\n\nPraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61445/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T15:00:47.003813Z"} {"uuid": "1ce68737-d1e2-4384-ab2f-7bb9b4ba3736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61445", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqewjmvsdf2b", "content": "\ud83d\udd34 CVE-2026-61445 - Critical (9.9)\n\nPraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61445/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T15:00:47.003813Z"} https://vulnerability.circl.lu/sighting/1ce68737-d1e2-4384-ab2f-7bb9b4ba3736/export Sat, 11 Jul 2026 15:00:47 +0000 https://vulnerability.circl.lu/sighting/f3c0832f-9e96-431b-bdcb-497d7fc4355a/export {"uuid": "f3c0832f-9e96-431b-bdcb-497d7fc4355a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61445", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevdbxrsj2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61445 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\n\n\n\nhttps://kripta.biz/posts/135D33BB-4813-437A-85BA-257B6CDC0C3D", "creation_timestamp": "2026-07-11T14:39:19.745811Z"} {"uuid": "f3c0832f-9e96-431b-bdcb-497d7fc4355a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61445", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevdbxrsj2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61445 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\n\n\n\nhttps://kripta.biz/posts/135D33BB-4813-437A-85BA-257B6CDC0C3D", "creation_timestamp": "2026-07-11T14:39:19.745811Z"} https://vulnerability.circl.lu/sighting/f3c0832f-9e96-431b-bdcb-497d7fc4355a/export Sat, 11 Jul 2026 14:39:19 +0000 https://vulnerability.circl.lu/sighting/26026efb-8e1a-440b-af0e-408d53d7fa21/export {"uuid": "26026efb-8e1a-440b-af0e-408d53d7fa21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqeulnifn32v", "content": "CVE-2026-61445\nPraisonAI's AICoder component has a security flaw that allows attackers to write files anywhere on the system and run commands with high-level permissions through the chat interface. This means sensitive data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-11T14:26:06.973252Z"} {"uuid": "26026efb-8e1a-440b-af0e-408d53d7fa21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqeulnifn32v", "content": "CVE-2026-61445\nPraisonAI's AICoder component has a security flaw that allows attackers to write files anywhere on the system and run commands with high-level permissions through the chat interface. This means sensitive data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-11T14:26:06.973252Z"} https://vulnerability.circl.lu/sighting/26026efb-8e1a-440b-af0e-408d53d7fa21/export Sat, 11 Jul 2026 14:26:06 +0000