Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-27 · source-backed
On August 25 the advisory database published 20 advisories against PraisonAI and praisonaiagents: 1 critical, 15 high, 4 medium. The recurring pattern is authentication that's declared but never enforced. praisonai serve agents --api-key is silently ignored. AgentServer declares auth_token and enforces it on no route. The Recipe server fails open when API-key or JWT auth is configured. The async Jobs API /api/v1/runs has no authentication at all (GitHub Advisory). The rest cover SSRF via DNS rebinding and redirect-following, workspace escape via symlinks, and an ast_grep_rewrite tool that rewrites arbitrary files without its @require_approval gate.
Each link below shares sources, entities, or timing with this story.
PraisonAI uses MCP / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (PraisonAI uses MCP); both cover DNS, GHSA, PraisonAI; reported by the same outlet (github.com).
PraisonAI uses MCP / Shared entities / Same source domain / Shared topic / Tension
Linked by a graph relationship (PraisonAI uses MCP); both cover GHSA, GitHub Advisory, SSRF; reported by the same outlet (github.com).
Claude Code supports JWT / Shared entity: DNS / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code supports JWT); both cover DNS; reported by the same outlet (github.com).
Claude Code supports JWT / Shared entity: SSRF / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code supports JWT); both cover SSRF; overlapping topics (against, agent).
PraisonAI uses MCP / Shared entity: JWT / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (PraisonAI uses MCP); both cover JWT; overlapping topics (against, agent, auth, authentication, cover).
Claude Code supports JWT / Shared entity: DNS / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code supports JWT); both cover DNS; overlapping topics (agent, august).
Claude Code supports JWT / Shared entity: SSRF / Same source domain / Earlier coverage
Linked by a graph relationship (Claude Code supports JWT); both cover SSRF; reported by the same outlet (github.com).
Linked by a graph relationship (Claude Code supports JWT); both cover SSRF; reported by the same outlet (github.com).