What is Copacabana Palace, A Belmond Hotel's cybersecurity risk score?

Copacabana Palace, A Belmond Hotel has an AI-generated cybersecurity risk score of 778 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Copacabana Palace, A Belmond Hotel experienced?

According to Rankiteo, Copacabana Palace, A Belmond Hotel currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Copacabana Palace, A Belmond Hotel been affected by any supply chain cyber incidents ?

According to Rankiteo, Copacabana Palace, A Belmond Hotel has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Salesforce (Incident ID: TIFLVMCHR1770865579) Salesforce (Incident ID: LOUPARVOLTIFJAP1770908674)

Does Copacabana Palace, A Belmond Hotel have SOC 2 Type 1 certification ?

According to Rankiteo, Copacabana Palace, A Belmond Hotel is not certified under SOC 2 Type 1.

Does Copacabana Palace, A Belmond Hotel have SOC 2 Type 2 certification ?

According to Rankiteo, Copacabana Palace, A Belmond Hotel does not hold a SOC 2 Type 2 certification.

Does Copacabana Palace, A Belmond Hotel comply with GDPR ?

According to Rankiteo, Copacabana Palace, A Belmond Hotel is not listed as GDPR compliant.

Does Copacabana Palace, A Belmond Hotel have PCI DSS certification ?

According to Rankiteo, Copacabana Palace, A Belmond Hotel does not currently maintain PCI DSS compliance.

Does Copacabana Palace, A Belmond Hotel comply with HIPAA ?

According to Rankiteo, Copacabana Palace, A Belmond Hotel is not compliant with HIPAA regulations.

Does Copacabana Palace, A Belmond Hotel have ISO 27001 certification ?

According to Rankiteo,Copacabana Palace, A Belmond Hotel is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Copacabana Palace, A Belmond Hotel operate in ?

Copacabana Palace, A Belmond Hotel operates primarily in the Hospitality industry.

How many employees does Copacabana Palace, A Belmond Hotel have ?

Copacabana Palace, A Belmond Hotel employs approximately 749 people worldwide.

Does Copacabana Palace, A Belmond Hotel own any subsidiaries ?

Copacabana Palace, A Belmond Hotel presently has no subsidiaries across any sectors.

How many LinkedIn followers does Copacabana Palace, A Belmond Hotel have ?

Copacabana Palace, A Belmond Hotel's official LinkedIn profile has approximately 50,373 followers.

What is the NAICS classification code for Copacabana Palace, A Belmond Hotel ?

Copacabana Palace, A Belmond Hotel is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does Copacabana Palace, A Belmond Hotel have a Crunchbase profile ?

No, Copacabana Palace, A Belmond Hotel does not have a profile on Crunchbase.

Does Copacabana Palace, A Belmond Hotel have a LinkedIn profile ?

Yes, Copacabana Palace, A Belmond Hotel maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hotel-copacabana-palace.

How many cybersecurity incidents has Copacabana Palace, A Belmond Hotel experienced ?

As of June 19, 2026, Rankiteo reports that Copacabana Palace, A Belmond Hotel has experienced 17 cybersecurity incidents.

How many peer or competitor companies does Copacabana Palace, A Belmond Hotel have ?

Copacabana Palace, A Belmond Hotel has an estimated 14,282 peer or competitor companies worldwide.

What types of cybersecurity incidents has Copacabana Palace, A Belmond Hotel faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CPBH

Boost Score +25 with badge (5 left)

778

/1000

Fair

803

/1000

Good

Copacabana Palace, A Belmond Hotel Vendor Cyber Rating & Cyber Score

belmond.com

Add Your Compliance Badge

A timeless hideaway in the heart of a buzzing city. A cosmopolitan way of life meets old-world glamour at Copacabana Palace. An iconic bar, Michelin-starred restaurant and botanical spa are all waiting to be discovered inside its art-deco walls. The best of Rio can be found on your doorstep. Stroll the mosaicked Portuguese pavement; samba in the city until sunrise; or simply stretch out and relax on the golden sands of the beach.

CPBH A.I CyberSecurity Scoring

Scoring History

CPBH

Copacabana Palace, A Belmond Hotel CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Louis Vuitton

Cyber Attack

6/2026

LOUHER178183601...

SEPHORA

Cyber Attack

6/2026

SEPTHE178049083...

SEPHORA

Breach

4/2026

SEP1780946094

Christian Dior Cout...

Breach

3/2026

CHR1773773151

Christian Dior Cout...

Breach

2/2026

Salesforce

TIFLVMCHR177086...

Copacabana Palace, ...

Breach

100

9/2025

PAR353253509232...

Copacabana Palace, ...

Breach

9/2025

CHR159271509302...

Copacabana Palace, ...

Breach

7/2025

LVM852071225

Copacabana Palace, ...

Breach

7/2025

LOU026510209062...

Christian Dior Cout...

Ransomware

100

5/2025

CHRMAR176950442...

Copacabana Palace, ...

Cyber Attack

5/2025

CHR316343111172...

Copacabana Palace, ...

Breach

1/2025

CHR706072225

Copacabana Palace, ...

Breach

1/2025

PAR711072225

Louis Vuitton

Breach

1/2025

Salesforce

LOUPARVOLTIFJAP...

Copacabana Palace, ...

Breach

100

11/2024

CHR243322409162...

Copacabana Palace, ...

Cyber Attack

6/2024

PAR517090325

Copacabana Palace, ...

Breach

07/2019

SEP2372423

Loading…

A.I.

CPBH Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CPBH

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for Copacabana Palace, A Belmond Hotel in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Copacabana Palace, A Belmond Hotel in 2026.

Incident Types CPBH vs Hospitality Industry Avg (This Year)

No incidents recorded for Copacabana Palace, A Belmond Hotel in 2026.

Incident History - CPBH (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Copacabana Palace, A Belmond Hotel Subsidiaries

CPBH

Hospitality

Website: https://www.belmond.com/hotels/south-america/brazil/rio-de-janeiro/belmond-copacabana-palace/?utm_source=social&utm_medium=link&utm_campaign=Linkedin_business&utm_content=COP

Company Size: 501-1,000 employees

103

BelmondHospitality

LVMHRetail Luxury Goods and Jewelry

SEPHORARetail

Louis VuittonRetail Luxury Goods and Jewelry

Christian Dior CoutureRetail Luxury Goods and Jewelry

BvlgariRetail Luxury Goods and Jewelry

Les EchosNewspaper Publishing

Les Echos STARTNewspaper Publishing

Les Echos Entrepreneurs Médias en ligne

The InnovatorÉdition de journaux

Les Echos Leadership & ManagementInformation Services

FendiRetail Luxury Goods and Jewelry

Benefit CosmeticsPersonal Care Product Manufacturing

Life at Benefit: We're in the Feelgood Business!Personal Care Product Manufacturing

Moët HennessyBeverage Manufacturing

HennessyBeverage Manufacturing

Moët & ChandonBeverage Manufacturing

RuinartBeverage Manufacturing

Veuve ClicquotBeverage Manufacturing

The Glenmorangie CompanyBeverage Manufacturing

CHANDONBeverage Manufacturing

Moët Hennessy Diageo FranceBeverage Manufacturing

KRUG ChampagneWine & Spirits

Moët Hennessy Diageo ChinaBeverage Manufacturing

Moët Hennessy Diageo SingaporeBeverage Manufacturing

Moët Hennessy Wine EstatesBeverage Manufacturing

Moët Hennessy Diageo MalaysiaBeverage Manufacturing

Cloudy Bay VineyardsBeverage Manufacturing

Belvedere VodkaBeverage Manufacturing

EminenteBeverage Manufacturing

Château GaloupetBeverage Manufacturing

Newton VineyardFood and Beverage Manufacturing

敖云 Ao Yun VineyardBeverage Manufacturing

LoeweRetail Luxury Goods and Jewelry

MAKE UP FOR EVERPersonal Care Product Manufacturing

GuerlainPersonal Care Product Manufacturing

Parfums Christian DiorPersonal Care Product Manufacturing

GIVENCHYRetail Luxury Goods and Jewelry

Loro PianaRetail Luxury Goods and Jewelry

CELINERetail Luxury Goods and Jewelry

Marc JacobsRetail Apparel and Fashion

LVMH Fragrance BrandsPersonal Care Product Manufacturing

Parfums GivenchyFabrication de parfums et de produits pour la toilette

KENZO ParfumsFabrication de parfums et de produits pour la toilette

TAG HeuerRetail Luxury Goods and Jewelry

RIMOWARetail Luxury Goods and Jewelry

HublotRetail Luxury Goods and Jewelry

DFS Group LimitedRetail

Samaritaine Paris Pont-NeufRetail

CHAUMETRetail Luxury Goods and Jewelry

KENZO ModeRetail Apparel and Fashion

BerlutiRetail Luxury Goods and Jewelry

GROUPE BON MARCHÉ : Le Bon Marché Rive Gauche et La Grande Epicerie de Paris.Retail

Maison Francis KurkdjianPersonal Care Product Manufacturing

Starboard Cruise ServicesRetail

ThéliosRetail Luxury Goods and Jewelry

ZENITH WatchesRetail Luxury Goods and Jewelry

24SRetail Apparel and Fashion

FRED JewelryRetail Luxury Goods and Jewelry

Acqua di ParmaRetail Luxury Goods and Jewelry

Moët Hennessy Diageo Hong Kong & MacauBeverage Manufacturing

Royal Van Lent ShipyardShipbuilding

LVMH Fashion Group North America Retail Luxury Goods and Jewelry

REPOSSIRetail Luxury Goods and Jewelry

NUDE SkincarePersonal Care Product Manufacturing

NOWNESSBook and Periodical Publishing

Moët Hennessy Diageo JapanFood and Beverage Services

Nona SourceRetail Apparel and Fashion

HeristoriaRetail Luxury Goods and Jewelry

Maroma, A Belmond HotelHospitality

Hotel Cipriani, A Belmond HotelHospitality

Grand Hotel EuropeHospitality

Mount Nelson, A Belmond HotelHospitality

Venice Simplon-Orient-ExpressHospitality

Le Manoir aux Quat'Saisons, A Belmond HotelHospitality

Miraflores Park, A Belmond HotelHospitality

The Cadogan, A Belmond HotelHospitality

Hotel das Cataratas, A Belmond HotelHospitality

Splendido, A Belmond HotelHospitality

Reid's Palace, A Belmond HotelHospitality

Grand Hotel Timeo, A Belmond HotelHospitality

Villa San Michele, A Belmond HotelHospitality

Belmond SafarisTravel Arrangements

La Residencia, A Belmond HotelHospitality

El Encanto, A Belmond HotelHospitality

Cap Juluca, A Belmond HotelHospitality

Villa Sant'Andrea, A Belmond HotelHospitality

La Samanna, A Belmond HotelHospitality

British Pullman, A Belmond TrainTravel Arrangements

Eastern & Oriental Express, A Belmond TrainHospitality

Caruso, A Belmond HotelHospitality

Castello di Casole, A Belmond HotelHospitality

Sanctuary Lodge, A Belmond HotelHospitality

Les Bateaux BelmondHospitality

Rio Sagrado, A Belmond HotelHospitality

Monasterio, A Belmond HotelHospitality

Casa de Sierra Nevada, A Belmond HotelHospitality

Royal Scotsman, A Belmond TrainTravel Arrangements

Jimbaran Puri, A Belmond HotelHospitality

Napasai, A Belmond HotelHospitality

Las Casitas, A Belmond HotelHospitality

Palacio Nazarenas, A Belmond HotelHospitality

21 ClubRestaurants

Loading…

Copacabana Palace, A Belmond Hotel Similar Companies

Aramark

cb aramark.com

Aramark (NYSE: ARMK) proudly serves the world’s leading educational institutions, Fortune 500 companies, world champion sports teams, prominent healthcare providers, iconic destinations and cultural attractions, and numerous municipalities in 16 countries around the world with food and facilities management. Because of our hospitality culture, our employees strive to do great things for each other, our partners, our communities, and the planet.

Hilton Grand Vacations

cb hgv.com

Hilton Grand Vacations is a global leader in vacation ownership, developing, marketing and operating a portfolio of high-quality, shared-ownership properties in highly desired vacation destinations. Our company also manages and operates innovative club membership programs providing exclusive exchange, leisure travel, and reservation services for our Members. At Hilton Grand Vacations, our culture of hospitality extends to our more than 10,000 Team Members who collectively play an important role in delivering exceptional service, quality accommodations, and memorable travel experiences. That’s why we’ve created a workplace that supports growth, opportunity, work-life balance, and respect throughout our Club affiliated properties, sales centers, and corporate offices around the globe.

Mandarin Oriental

mandarinoriental.com

Mandarin Oriental Hotel Group is the award-winning owner and operator of some of the world’s most luxurious hotels, resorts and residences. Having grown from its Asian roots into a global brand, the Group now operates 43 hotels, 12 residences and 23 exclusive homes in 26 countries and territories, with each property reflecting the Group’s oriental heritage, local culture and unique design. Mandarin Oriental has a strong pipeline of hotels and residences under development and is a member of the Jardine Matheson Group. Mandarin Oriental’s aim is to be recognised widely as the best global luxury hotel group, providing 21st-century luxury with oriental charm in each of its hotels. This will be achieved by investing in the Group’s exceptional facilities and people while maximizing profitability and long-term shareholder value. The Group regularly receives recognition and awards for outstanding service and quality management. The strategy of the Group is to open the hotels currently under development while continuing to seek further selective opportunities for expansion around the world. The parent company, Mandarin Oriental International Limited, is incorporated in Bermuda and has a premium listing on the London Stock Exchange, with secondary listings in Bermuda and Singapore. Mandarin Oriental Hotel Group International Limited, which operates from Hong Kong, manages the activities of the Group’s hotels. Mandarin Oriental is a member of the Jardine Matheson Group.

Jumeirah

jumeirah.com

Jumeirah, a global leader in luxury hospitality and a member of Dubai Holding, operates an exceptional portfolio of 31 properties, including 33 signature F&B restaurants, across the Middle East, Europe, Asia and Africa. In 1999, Jumeirah changed the face of luxury hospitality with the opening of the iconic Jumeirah Burj Al Arab and the brand is now renowned worldwide for its distinguished beachfront resorts, esteemed city hotels and luxury residences. From the contemporary Maldivian island paradise at Jumeirah Olhahali Island to the art-inspired Jumeirah Capri Palace in Italy and the modern twist on a British classic at Jumeirah Carlton Tower in London, the brand has become synonymous with warm and generous service and the ability to craft distinctive and purposeful experiences that bring joy to guests from across the world.

Hilton

cb hilton.com

Hilton (NYSE: HLT) is a leading global hospitality company with a portfolio of 24 world-class brands comprising more than 8,400 properties and over 1.25 million rooms, in 140 countries and territories. Dedicated to fulfilling its founding vision to fill the earth with the light and warmth of hospitality, Hilton has welcomed over 3 billion guests in its more than 100-year history, was named the No. 1 World’s Best Workplace by Great Place to Work and Fortune and has been recognized as a global leader on the Dow Jones Sustainability Indices. Hilton has introduced industry-leading technology enhancements to improve the guest experience, including Digital Key Share, automated complimentary room upgrades and the ability to book confirmed connecting rooms. Through the award-winning guest loyalty program Hilton Honors, the more than 210 million Hilton Honors members who book directly with Hilton can earn Points for hotel stays and experiences money can't buy. With the free Hilton Honors app, guests can book their stay, select their room, check in, unlock their door with a Digital Key and check out, all from their smartphone. Visit stories.hilton.com for more information, and connect with Hilton on Facebook, X, LinkedIn, Instagram and YouTube.

Accor

accor.com

We are Accor We are more than 290,000 hospitality experts placing people at the heart of what we do, creating emotion for our guests, and nurturing passion for service and achievement beyond limits. Building on the strength of our teams and of our fully integrated ecosystem of leading brands, personalized services & expert solutions, we break new ground to reimagine hospitality and inspire new ways to experience the world. We are dedicated to suit all desires and needs, and reinvent the guest experience every day with our 45 hotel brands across all segments- 5,600 properties around the world from luxury five-star palaces to smart economy hotels, exquisite residences to full-service resorts. Because we take care of millions of guests and each of our hotels is a world in itself, where every action counts. We strive to make positive impact both locally and globally, to ensure hospitality benefits not only the few, but all.

Rotana Hotels

rotana.com

Since inception, Rotana has grown to be the region’s largest hospitality management company, and a brand that is widely recognized and admired. Rotana currently manages a portfolio of over 100 properties throughout the Middle East, Africa, Eastern Europe and Türkiye offering a wide range of services and products through its 6 sub brands; Rotana Hotels & Resorts for the 4 and 5 star properties, Arjaan Hotel Apartments for the long term stays, Rayhaan Hotels & Resorts, Rotana’s alcohol free 4 and 5 star properties, Centro Hotels, a 3 star plus affordable lifestyle brand, Edge by Rotana our collection of independent hotels and The Residences by Rotana, a brand developed for guests that are looking for a permanent home. If you are interested to join Rotana, kindly log on to www.rotanacareers.com and proceed with the online application and our Human Resources Team will look into your respective application.

J D Wetherspoon

jdwetherspooncareers.com

J D Wetherspoon is a leading pub operator in the UK and Ireland. Back in 1979, founder chairman Tim Martin opened the very first Wetherspoon – in Muswell Hill, north London. Today, Tim and the company run over 850 pubs and hotels, spread right across the UK and, more recently, Ireland. During its history of over 40 years, Wetherspoon has repeatedly led the way with ground-breaking initiatives, picked up hundreds of awards (covering all aspects of pub life) and grown from a handful of staff to over 40,000 employees. The company seeks to develop its staff through effective and award-winning training and development, through a positive working environment and, of course, by means of a competitive pay packet. Every year, thousands of staff complete one or more of our award-winning training courses, not only preparing them to work safely and to the best of their ability, but also inspiring them to pursue positive career development. The company prides itself in offering, at all levels, excellent training and support.

Meliá Hotels International

ow.ly

Welcome to Meliá Hotels International! From Mallorca to the world, our story is an exciting journey that began more than six decades ago and has led us to become one of the largest hotel chains on the planet and the most sustainable in Europe (S&P Global). With more than 400 hotels across the world, our passion for hospitality drives us to deliver unique and memorable experiences through our nine brands: Gran Meliá Hotels & Resorts, ME by Meliá, The Meliá Collection, Paradisus by Meliá, Meliá Hotels & Resorts, ZEL, INNSiDE by Meliá, Sol by Meliá and Affiliated by Meliá. If you are looking for a place where your talent can shine and contribute to a more sustainable future, Meliá Hotels International is your destination. We are a family of more than 45,000 people, where every one of us is a VIP (Very Inspiring People) and we are proud to be a Top Employer in multiple countries. Being part of Meliá is to undertake a journey without borders, because the possibilities for development and learning are endless. Here, we enjoy a passionate and familiar environment, full of opportunities where inspiration will always be with you. Join us and feel like a true VIP!

Loading…

NEWS

Copacabana Palace, A Belmond Hotel CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 01, 2024 08:00 AM

Farm Rio And Copacabana Palace Collaborate To Mark The Hotel’s 100th Anniversary

The pair pay homage to the city and its historic and most famous hotel, Copacabana Palace, A Belmond Hotel with exclusive fashion creations.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-56078

SUMMARY

PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal sequences like ../ in agent IDs to read, write, or overwrite arbitrary files, enabling sensitive disclosure, denial of service, or code execution.

Published

Date2026-06-18

Updated

Date2026-06-18

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-56077

SUMMARY

PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs. Attackers can exploit the lack of agent ID uniqueness enforcement to share ledger instances and expose system prompts and conversation history between agents.

Published

Date2026-06-18

Updated

Date2026-06-18

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-56076

SUMMARY

PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution. The POST /agui endpoint lacks authentication and hardcodes Access-Control-Allow-Origin: * headers, combined with Starlette's Content-Type-agnostic JSON parsing, enabling attackers to bypass CORS preflight checks via simple requests and exfiltrate sensitive agent responses including tool execution results and environment data.

Published

Date2026-06-18

Updated

Date2026-06-18

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

2.8

REFERENCES

CVE-2026-56075

SUMMARY

PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration from PRAISON_APPROVAL_MODE environment variable. Authenticated attackers can instruct the LLM agent to execute arbitrary shell commands via subprocess.run with shell=True, bypassing the manual approval gate and insufficient command sanitization blocklists.

Published

Date2026-06-18

Updated

Date2026-06-18

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-56074

SUMMARY

PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then silently exfiltrate API keys and credentials via subsequent shell commands without user consent.

Published

Date2026-06-18

Updated

Date2026-06-18

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

cvss4

Base Score: 6.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

1.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…