What’s Vulnerable › Vulnerabilities

CVE-2026-57118: PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-12 · updated 2026-10-16
• Weakness: CWE-306

Description

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /{path}/list, POST /{path}, and `POST /{path}/{agent_id}' without access-control checks before listing agents or calling agent.chat. A remotely exposed server can therefore let unauthenticated clients enumerate agents, consume model resources, access connected private context, and trigger agent tools or workflow side effects. This vulnerability is fixed in praisonaiagents 1.6.59.

Affected products

• MervinPraison PraisonAI: before 4.6.59
• MervinPraison praisonaiagents: before 1.6.59

References

• https://github.com/MervinPraison/PraisonAI/commit/b4270173d4123fb1ee8910588f0896668ee21b59
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.59
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x8cv-xmq7-p8xp
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x8cv-xmq7-p8xp

Get alerted when CVE-2026-57118 or the next vulnerability affects your stack