{"vulnerability": "cve-2026-4739", "sightings": [{"uuid": "ef1ff1a4-e3e9-4eb3-8fda-56ce4101a757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4739", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116283685757971538", "content": "", "creation_timestamp": "2026-03-24T10:30:33.211258Z"}, {"uuid": "a78258f5-3278-4037-a002-64b1e83cf259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4739", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhsem4v3rk25", "content": "", "creation_timestamp": "2026-03-24T10:30:35.074663Z"}, {"uuid": "65089442-9947-4945-b309-06613406f268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrz4l5yyl2d", "content": "", "creation_timestamp": "2026-03-24T07:05:01.544383Z"}, {"uuid": "e16935ad-7360-4650-a92b-fffb29f293d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4739", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4739", "content": "", "creation_timestamp": "2026-03-24T03:17:29.000000Z"}, {"uuid": "7dd7a7f7-b93c-40ad-8617-a6fd64b4c5a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47391", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vg22-4gmj-prxw", "content": "", "creation_timestamp": "2026-05-19T06:35:04.000000Z"}, {"uuid": "3936d395-3bb6-456e-b115-4497b668cccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47397", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hvhp-v2gc-268q", "content": "", "creation_timestamp": "2026-05-19T06:35:00.000000Z"}, {"uuid": "e22c9f06-d96c-4aab-bbcb-6a1cf013ae77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47399", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6h6v-6m7w-7vxx", "content": "", "creation_timestamp": "2026-05-19T06:35:47.000000Z"}, {"uuid": "cf40e4a9-1dad-4361-8b11-7f4d0d7b57c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47394", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9cr9-25q5-8prj", "content": "", "creation_timestamp": "2026-05-19T06:34:57.000000Z"}, {"uuid": "2cadefa0-5ce4-4b88-8334-89613e07c050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47392", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4mr5-g6f9-cfrh", "content": "", "creation_timestamp": "2026-05-19T06:34:53.000000Z"}, {"uuid": "005b9863-864a-4ad2-8d94-b3dd69183ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47395", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5cxw-77wg-jrf3", "content": "", "creation_timestamp": "2026-05-19T06:34:56.000000Z"}, {"uuid": "c92f9223-18b4-46e3-8d2f-d01782d17359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47393", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-8444-4fhq-fxpq", "content": "", "creation_timestamp": "2026-05-29T22:29:20.000000Z"}, {"uuid": "a9d2b902-3e76-4873-9d9c-a58c196a47fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47396", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-86qc-r5v2-v6x6", "content": "", "creation_timestamp": "2026-05-19T06:34:59.000000Z"}, {"uuid": "0e7d137e-30a6-4d01-ab29-096d68ce2f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47390", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5c6w-wwfq-7qqm", "content": "", "creation_timestamp": "2026-05-19T06:34:55.000000Z"}, {"uuid": "f75de5a6-bd55-4c60-b0da-7b728def04cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47398", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-78r8-wwqv-r299", "content": "", "creation_timestamp": "2026-05-19T06:35:03.000000Z"}, {"uuid": "ccaf3ac9-2175-4097-bd43-5d45b10fc143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47391", "type": "seen", "source": "MISP/d511a704-eba2-411a-9543-41e0e130f522", "content": "", "creation_timestamp": "2026-06-15T17:02:34.000000Z"}, {"uuid": "847803cd-4c68-45ee-81ad-722fbc75122e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47392", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr67xexkxl2i", "content": "CVE-2026-47392 - praisonai\nPraisonAI's execute_code function in subprocess sandbox mode can be bypassed, allowing attackers to execute arbitrary OS commands on the host. This is a critical\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-07-21T16:26:05.196986Z"}, {"uuid": "92949bb7-8e6b-43c6-be5b-91a8ea51f74d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47393", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr67xg6sdj23", "content": "CVE-2026-47393 - praisonai\nPraisonAI's default API server is insecure because it doesn't require authentication. This means anyone can access the server's endpoints without a password. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-07-21T16:26:06.097078Z"}, {"uuid": "b52b2dc5-8a65-4b51-8b0b-62cd1346a862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6axknrdb2a", "content": "CVE-2026-47396 - praisonai\nThe PraisonAI call server allows anyone to list, invoke, and delete agents if a special token is not set. This is a security risk because the server is exposed to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-07-21T16:44:04.570863Z"}, {"uuid": "46c6222c-71e4-48cb-a68c-2da827430dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47391", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6axm7dk624", "content": "CVE-2026-47391 - praisonai\nThe PraisonAI official A2A example for their AI model allows an attacker to execute arbitrary code on the server without authentication. This can happen if the example is exposed to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #pip #CVE #infosec", "creation_timestamp": "2026-07-21T16:44:06.586562Z"}, {"uuid": "52f1407e-ed75-4161-ad18-c7502ebb3e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47397", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6guka6je2e", "content": "CVE-2026-47397 - PraisonAI has an Arbitrary File Write in Python API\nCVE ID : CVE-2026-47397\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonA...", "creation_timestamp": "2026-07-21T18:29:45.928759Z"}, {"uuid": "7f6cffe2-07de-4294-8f54-dcae7b99b85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47399", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6h3ybzeo23", "content": "CVE-2026-47399 - PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID\nCVE ID : CVE-2026-47399\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the PraisonAI mult...", "creation_timestamp": "2026-07-21T18:33:55.517574Z"}, {"uuid": "ecf8e1d4-e53a-4ea7-89c7-2d06a51ad044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6huto2mm2b", "content": "CVE-2026-47398 - PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334\nCVE ID : CVE-2026-47398\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI is a multi-agent teams ...", "creation_timestamp": "2026-07-21T18:47:49.601890Z"}]}