<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 26 Aug 2026 20:29:38 +0000</lastBuildDate>
    <item>
      <title>5c1782a1-423c-45ad-bb8d-5e782c4667e4</title>
      <link>https://vulnerability.circl.lu/sighting/5c1782a1-423c-45ad-bb8d-5e782c4667e4/export</link>
      <description>{"uuid": "5c1782a1-423c-45ad-bb8d-5e782c4667e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55541", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtx4gsv7ss2f", "content": "CVE-2026-55541 - praisonai\nThe PraisonAI command that should require an API key does not actually check it, leaving the server accessible to anyone. This affects versions from 4.6.34 onward,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-08-26T00:50:04.621517Z"}</description>
      <content:encoded>{"uuid": "5c1782a1-423c-45ad-bb8d-5e782c4667e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55541", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtx4gsv7ss2f", "content": "CVE-2026-55541 - praisonai\nThe PraisonAI command that should require an API key does not actually check it, leaving the server accessible to anyone. This affects versions from 4.6.34 onward,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-08-26T00:50:04.621517Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5c1782a1-423c-45ad-bb8d-5e782c4667e4/export</guid>
      <pubDate>Wed, 26 Aug 2026 00:50:04 +0000</pubDate>
    </item>
    <item>
      <title>0d9e744f-cc71-4461-be15-73154aca3249</title>
      <link>https://vulnerability.circl.lu/sighting/0d9e744f-cc71-4461-be15-73154aca3249/export</link>
      <description>{"uuid": "0d9e744f-cc71-4461-be15-73154aca3249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55541", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-pvxx-r596-f5qj", "content": "", "creation_timestamp": "2026-08-25T16:35:26.278959Z"}</description>
      <content:encoded>{"uuid": "0d9e744f-cc71-4461-be15-73154aca3249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55541", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-pvxx-r596-f5qj", "content": "", "creation_timestamp": "2026-08-25T16:35:26.278959Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0d9e744f-cc71-4461-be15-73154aca3249/export</guid>
      <pubDate>Tue, 25 Aug 2026 16:35:26 +0000</pubDate>
    </item>
    <item>
      <title>9e305432-3698-441e-8252-bd0c16ac7de0</title>
      <link>https://vulnerability.circl.lu/sighting/9e305432-3698-441e-8252-bd0c16ac7de0/export</link>
      <description>{"uuid": "9e305432-3698-441e-8252-bd0c16ac7de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55541", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtw4n5te3z2v", "content": "PraisonAI's `praisonai serve agents` and `serve unified` parse `--api-key` but never wire it into the FastAPI app \u2014 no middleware, no header check. CVE-2026-55541, HIGH, confirmed on 4.6.50: the server runs open regardless of the key you set. #dev", "creation_timestamp": "2026-08-25T15:20:58.165186Z"}</description>
      <content:encoded>{"uuid": "9e305432-3698-441e-8252-bd0c16ac7de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55541", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtw4n5te3z2v", "content": "PraisonAI's `praisonai serve agents` and `serve unified` parse `--api-key` but never wire it into the FastAPI app \u2014 no middleware, no header check. CVE-2026-55541, HIGH, confirmed on 4.6.50: the server runs open regardless of the key you set. #dev", "creation_timestamp": "2026-08-25T15:20:58.165186Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9e305432-3698-441e-8252-bd0c16ac7de0/export</guid>
      <pubDate>Tue, 25 Aug 2026 15:20:58 +0000</pubDate>
    </item>
  </channel>
</rss>
