<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T23:57:48.405648+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f71be9dd-3ab8-4ebd-9eca-789fb16b1138/export</id>
    <title>f71be9dd-3ab8-4ebd-9eca-789fb16b1138</title>
    <updated>2026-09-14T23:57:48.437886+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f71be9dd-3ab8-4ebd-9eca-789fb16b1138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57145", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipckqwyd2f", "content": "\ud83d\udea8 CVE-2026-57145 \u2014 CVSS 9.1 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to 4.6.62, src/praisonai/praisonai/tools/multiedit.py passes...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57145\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:08:10.213237Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f71be9dd-3ab8-4ebd-9eca-789fb16b1138/export"/>
    <published>2026-09-14T18:08:10.213237+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c106b2e6-46ad-4b81-8dc9-86fb8a152642/export</id>
    <title>c106b2e6-46ad-4b81-8dc9-86fb8a152642</title>
    <updated>2026-09-14T23:57:48.441180+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c106b2e6-46ad-4b81-8dc9-86fb8a152642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57145", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvlzsfq2u", "content": "CVE-2026-57145 - praisonai\nThe PraisonAI multiedit tool allows attackers to read sensitive files and overwrite arbitrary files on the system. This is because the tool does not check file paths for safety,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #pip #CVE #infosec", "creation_timestamp": "2026-07-23T17:02:04.889917Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c106b2e6-46ad-4b81-8dc9-86fb8a152642/export"/>
    <published>2026-07-23T17:02:04.889917+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8ba0e1bc-601f-45e8-a30d-bd9c2f1a489a/export</id>
    <title>8ba0e1bc-601f-45e8-a30d-bd9c2f1a489a</title>
    <updated>2026-09-14T23:57:48.441324+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "8ba0e1bc-601f-45e8-a30d-bd9c2f1a489a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57145", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47", "content": "", "creation_timestamp": "2026-07-20T22:35:46.529097Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8ba0e1bc-601f-45e8-a30d-bd9c2f1a489a/export"/>
    <published>2026-07-20T22:35:46.529097+00:00</published>
  </entry>
</feed>
