Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-57118: PraisonAI agents can be listed and triggered without login
CVE-2026-57118 · published today
Summary
The PraisonAI system lets anyone view the names of its agents and send commands to them, even if they are not logged in. This can waste compute resources, reveal private information, and cause unintended actions. Upgrade to version 1.6.59 or later to add the necessary access checks.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| mervinpraison | praisonai | < 4.6.59 |
| mervinpraison | praisonaiagents | < 1.6.59 |
Original advisory text
PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /{path}/list, POST /{path}, and `POST /{path}/{agent_id}' without access-control checks before listing agents or calling agent.chat. A remotely exposed server can therefore let unauthenticated clients enumerate agents, consume model resources, access connected private context, and trigger agent tools or workflow side effects. This vulnerability is fixed in praisonaiagents 1.6.59.
References
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-306Missing Authentication for Critical Function
CWE-862Missing Authorization
Timeline
Published12 Oct 2026
Updated12 Oct 2026
First seen12 Oct 2026
Track software like this
Free during beta