<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 16 Sep 2026 23:25:36 +0000</lastBuildDate>
    <item>
      <title>4bf072bc-527d-4a05-9404-2c0d084ab6d0</title>
      <link>https://vulnerability.circl.lu/sighting/4bf072bc-527d-4a05-9404-2c0d084ab6d0/export</link>
      <description>{"uuid": "4bf072bc-527d-4a05-9404-2c0d084ab6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57138", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmdnemcih25", "content": "CVE-2026-57138 - praisonai\nVersions 1.4.0 through 1.7.1 of PraisonAI allow code entered into the codeMode feature to break out of its sandbox and run arbitrary commands on the server. An\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #npm #CVE #infosec", "creation_timestamp": "2026-09-16T04:50:06.956200Z"}</description>
      <content:encoded>{"uuid": "4bf072bc-527d-4a05-9404-2c0d084ab6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57138", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmdnemcih25", "content": "CVE-2026-57138 - praisonai\nVersions 1.4.0 through 1.7.1 of PraisonAI allow code entered into the codeMode feature to break out of its sandbox and run arbitrary commands on the server. An\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #npm #CVE #infosec", "creation_timestamp": "2026-09-16T04:50:06.956200Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4bf072bc-527d-4a05-9404-2c0d084ab6d0/export</guid>
      <pubDate>Wed, 16 Sep 2026 04:50:06 +0000</pubDate>
    </item>
    <item>
      <title>a7be5749-9238-41f0-8e0e-d7aa6abef5b0</title>
      <link>https://vulnerability.circl.lu/sighting/a7be5749-9238-41f0-8e0e-d7aa6abef5b0/export</link>
      <description>{"uuid": "a7be5749-9238-41f0-8e0e-d7aa6abef5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57138", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvl3xsfimc2t", "content": "CVE-2026-57138 - praisonai\nVersions of PraisonAI from 1.4.0 through 1.7.1 run user\u2011provided JavaScript in a weak isolation that can be bypassed. An attacker could read confidential files, change data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #CVE #infosec", "creation_timestamp": "2026-09-15T17:00:07.665066Z"}</description>
      <content:encoded>{"uuid": "a7be5749-9238-41f0-8e0e-d7aa6abef5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57138", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvl3xsfimc2t", "content": "CVE-2026-57138 - praisonai\nVersions of PraisonAI from 1.4.0 through 1.7.1 run user\u2011provided JavaScript in a weak isolation that can be bypassed. An attacker could read confidential files, change data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #CVE #infosec", "creation_timestamp": "2026-09-15T17:00:07.665066Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a7be5749-9238-41f0-8e0e-d7aa6abef5b0/export</guid>
      <pubDate>Tue, 15 Sep 2026 17:00:07 +0000</pubDate>
    </item>
    <item>
      <title>7ee51fc1-cdfc-4551-bf56-0a6665cdf7cf</title>
      <link>https://vulnerability.circl.lu/sighting/7ee51fc1-cdfc-4551-bf56-0a6665cdf7cf/export</link>
      <description>{"uuid": "7ee51fc1-cdfc-4551-bf56-0a6665cdf7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57138", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklo3gxse2y", "content": "\ud83d\udea8 CVE-2026-57138 \u2014 CVSS 9.9 CRITICAL\n\nPraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/bui...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57138\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:08:21.354217Z"}</description>
      <content:encoded>{"uuid": "7ee51fc1-cdfc-4551-bf56-0a6665cdf7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57138", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklo3gxse2y", "content": "\ud83d\udea8 CVE-2026-57138 \u2014 CVSS 9.9 CRITICAL\n\nPraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/bui...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57138\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:08:21.354217Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7ee51fc1-cdfc-4551-bf56-0a6665cdf7cf/export</guid>
      <pubDate>Tue, 15 Sep 2026 12:08:21 +0000</pubDate>
    </item>
    <item>
      <title>d96fb121-d3c9-4d20-ad31-fb4745a6dc9a</title>
      <link>https://vulnerability.circl.lu/sighting/d96fb121-d3c9-4d20-ad31-fb4745a6dc9a/export</link>
      <description>{"uuid": "d96fb121-d3c9-4d20-ad31-fb4745a6dc9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57138", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vmmj-pfw7-fjwp", "content": "", "creation_timestamp": "2026-07-20T22:36:02.049865Z"}</description>
      <content:encoded>{"uuid": "d96fb121-d3c9-4d20-ad31-fb4745a6dc9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57138", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vmmj-pfw7-fjwp", "content": "", "creation_timestamp": "2026-07-20T22:36:02.049865Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d96fb121-d3c9-4d20-ad31-fb4745a6dc9a/export</guid>
      <pubDate>Mon, 20 Jul 2026 22:36:02 +0000</pubDate>
    </item>
  </channel>
</rss>
