Read the docs
TI-2026-40469 Aliases CVE-2026-56077GHSA-qwwv-hc99-6f5p

PraisonAI - Information Disclosure via Shared MultiAgentLedger State

Priority LOW 32CWE-668Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-668 and the CVSS impact.

Summary

PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs. Attackers can exploit the lack of agent ID uniqueness enforcement to share ledger instances and expose system prompts and conversation history between agents.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00445 38th percentileScored 2026-11-07
Fix Fixed PraisonAI (PraisonAI): 1.5.115

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PraisonAIPraisonAIbefore 1.5.1151.5.115Patch availableCNA
  • PraisonAI VendorPraisonAI Affected before 1.5.115 Fixed in 1.5.115 Patch available CNA

Remediation

  • Fix · CNA PraisonAI (PraisonAI) Fixed in 1.5.115

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    PraisonAI — github.com/MervinPraison/PraisonAI/security/advisories/GHSA…

    2 records Highest priority Priority HIGH 1 HIGH, 1 LOW

    Other records, highest priority first

    • TI-2026-40470 PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitorPriority HIGH 73
    Show all 2 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-56077
  2. 2026-10-03 Alias added: GHSA-qwwv-hc99-6f5p

References

Advisory 1

Other 1

  • TI-2026-40470 PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitor CVSS 4.0HIGH 8.7
  • TI-2026-40467 PraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode Override CVSS 4.0HIGH 8.7
  • TI-2026-40468 PraisonAI - Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint CVSS 4.0HIGH 8.6
  • TI-2026-40466 PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching CVSS 4.0MEDIUM 6.8
  • TI-2026-42218 PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences