{"vulnerability": "cve-2026-6143", "sightings": [{"uuid": "7e315da9-e324-495a-97d3-bf12f3f4dba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61434", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjxeiech2k", "content": "CVE-2026-61434 - PraisonAI before 4.6.78 Allowlist Bypass via find -exec\nCVE ID : CVE-2026-61434\n \n Published : July 10, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that...", "creation_timestamp": "2026-07-10T16:10:29.105318Z"}, {"uuid": "d1848476-1b49-4645-9f75-6d3704f021d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61432", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqckwzwntr2k", "content": "CVE-2026-61432 - PraisonAI FastContext before 1.6.78 Path Traversal\nCVE ID : CVE-2026-61432\n \n Published : July 10, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : PraisonAI (praisonaiagents) before 1.6.78 contains a path traversal vulnerability in the FastContext feature (p...", "creation_timestamp": "2026-07-10T16:28:11.602937Z"}, {"uuid": "ed5c8f7d-0bd4-4d70-a399-96279414e83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61437", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqclqmets62x", "content": "CVE-2026-61437 - PraisonAI before 1.6.78 Remote Code Execution via tools.py\nCVE ID : CVE-2026-61437\n \n Published : July 10, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnera...", "creation_timestamp": "2026-07-10T16:42:30.004020Z"}, {"uuid": "61fb2881-426d-4adb-955b-c5b6cd39091a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61431", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmlhpqih2l", "content": "CVE-2026-61431 - PraisonAI before 4.6.78 Path Traversal via ContextGatherer\nCVE ID : CVE-2026-61431\n \n Published : July 10, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 contains a path traversal vulnerability in ContextGatherer that fails to valida...", "creation_timestamp": "2026-07-10T16:57:30.949792Z"}, {"uuid": "4dec5895-8279-412b-9377-042b238d23a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61432", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxneg5ju2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61432 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A20AA79B-D633-45A6-A51F-DAEF944F82C0", "creation_timestamp": "2026-07-10T20:15:25.970324Z"}, {"uuid": "52c31479-479f-4e79-bc11-d3359c7df27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61437", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxopggxy27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61437 \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DECF86D0-28B5-412A-81C6-D658F993B35B", "creation_timestamp": "2026-07-10T20:16:10.773583Z"}, {"uuid": "fa888263-481e-45c0-958c-1dec7b1ef35e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61431", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxtbl45i2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61431 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 path traversal \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/AC3F488C-C94F-4ECC-BC7D-BBD5B004F7A6", "creation_timestamp": "2026-07-10T20:18:44.210073Z"}, {"uuid": "8bdda382-67d9-4097-9c4e-d9557045c7d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61434", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxuudb3h2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61434 \u0432 PraisonAI: \u043a\u0430\u043a \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0435\u043b\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443\n\n\n\nhttps://kripta.biz/posts/CC54F8A3-BD4A-45DE-8030-B465661F52E0", "creation_timestamp": "2026-07-10T20:19:37.374450Z"}, {"uuid": "9959ba4c-9e05-4479-9fc0-f9d7bcaf8bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61431", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd5s4vqkc2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61431 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 path traversal \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/2784A752-A6C0-466C-BE0E-348ACE5C04D6", "creation_timestamp": "2026-07-10T22:05:28.495767Z"}, {"uuid": "aa10ab9d-9eea-49cf-a2f3-8d9ba90751e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61432", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdciu24wy2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61432 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A05DC1FC-698C-4018-AE44-0607CE88B3BE", "creation_timestamp": "2026-07-10T23:29:45.437221Z"}, {"uuid": "c527588f-cde4-4b0c-9f8f-b7899b34f9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61434", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdckd2kkl2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61434 \u0432 PraisonAI: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442 \u043e\u0431\u0445\u043e\u0434\u0430 \u0431\u0435\u043b\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430\n\n\n\nhttps://kripta.biz/posts/8D3145BB-F387-4F2E-9572-4DA5D42CD21E", "creation_timestamp": "2026-07-10T23:30:34.830530Z"}, {"uuid": "90e44e4c-7291-4c52-a9b9-816c24ba2175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61437", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcljxxtj2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61437 \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B813ED22-EA0F-499B-BD3C-C905F23F6CBA", "creation_timestamp": "2026-07-10T23:31:15.623163Z"}, {"uuid": "eaff400b-2fb0-4c40-a8c7-cda1988c8905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61439", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqeuscng642d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61439 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FA0902A0-9243-41EE-AF11-59E00784A489", "creation_timestamp": "2026-07-11T14:29:50.029869Z"}, {"uuid": "780feb23-2a68-41ec-a9a6-3ed5d3c7e0b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61439", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqewlowpp32d", "content": "\ud83d\udfe0 CVE-2026-61439 - High (7.5)\n\nPraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the bl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61439/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T15:02:03.026868Z"}, {"uuid": "c3ac97c0-73a6-434e-bbd0-c9a6015f9a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqf33uxyh32i", "content": "CVE-2026-61439 - PraisonAI before 4.6.78 Prompt Injection Defense Bypass\nCVE ID : CVE-2026-61439\n \n Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the bloc...", "creation_timestamp": "2026-07-11T16:22:33.709300Z"}, {"uuid": "18cd5f19-440f-4503-afc8-d43b98c1ef66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61439", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqf5tmpidk2j", "content": "\u2694\ufe0f ATTACKS CVE Notify: \ud83d\udea8 [CVE-2026-61439](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fj8f-m44g-c4...\nhttps://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fj8f-m44g-c479 #InfoSec #CyberAttack #ThreatIntel", "creation_timestamp": "2026-07-11T17:11:38.321564Z"}, {"uuid": "f5fb93bc-682e-4eb3-a13a-e30d6be775ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61434", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqfy24w4np2r", "content": "\ud83d\udfe0 CVE-2026-61434 - High (8.8)\n\nPraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61434/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-12T01:00:33.829055Z"}, {"uuid": "3ced83e3-541f-4dad-acbf-b6f432d19b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61437", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqg6qh4gow25", "content": "\ud83d\udfe0 CVE-2026-61437 - High (7.8)\n\nPraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61437/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-12T03:00:25.490408Z"}, {"uuid": "7039ec23-69c4-45bd-9f2a-136bc4a7cead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3bro2kc22", "content": "CVE-2026-61430 - PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawl\nCVE ID : CVE-2026-61430\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl t...", "creation_timestamp": "2026-07-15T15:52:28.881691Z"}, {"uuid": "39aaf71a-adbe-4930-9a14-a8cfa5c8f407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3m2hi2z22", "content": "CVE-2026-61435 - PraisonAI before 4.6.78 Authentication Bypass via Host Header Spoofing\nCVE ID : CVE-2026-61435\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent i...", "creation_timestamp": "2026-07-15T15:58:13.760214Z"}, {"uuid": "507819e1-51fe-45d6-af99-dd456f685fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3rzyupx2e", "content": "CVE-2026-61433 - PraisonAI before 4.6.78 Code Injection via API deployment generator\nCVE ID : CVE-2026-61433\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 fails to safely encode deployment configuration values when ...", "creation_timestamp": "2026-07-15T16:01:34.562643Z"}, {"uuid": "9f58239a-40ce-40d8-af2e-fef94a14ba8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp4ahmwr222", "content": "CVE-2026-61436 - PraisonAI before 4.6.78 Missing Webhook Signature Verification\nCVE ID : CVE-2026-61436\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode...", "creation_timestamp": "2026-07-15T16:09:38.445435Z"}]}