Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

PraiserAI agents can be listed and invoked without authentication

CVE-2026-57118 · published 6 days ago
Summary

Versions of PraiserAI before 1.6.59 let anyone view the list of agents and send commands to them, even without a login. This can waste your computing resources, expose private information, and trigger unwanted actions. Upgrade to PraiserAI agents version 1.6.59 or later to add the necessary access checks.

What to do
  • Update mervin praison praisonaiagents to version 1.6.59.
Affected software
Ecosystem VendorProductAffected versions
pip mervin praison praisonaiagents < 1.6.59
Fix: upgrade to 1.6.59
Original advisory text
PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /{path}/list, POST /{path}, and `POST /{path}/{agent_id}' without access-control checks before listing agents or calling agent.chat. A remotely exposed server can therefore let unauthenticated clients enumerate agents, consume model resources, access connected private context, and trigger agent tools or workflow side effects. This vulnerability is fixed in praisonaiagents 1.6.59.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
CWE-862Missing Authorization
Timeline
Published12 Oct 2026
Updated16 Oct 2026
First seen18 Jun 2026
Sources
GHSA-x8cv-xmq7-p8xp · GHSA
CVE-2026-57118 · OSV
Track software like this
Free during beta