Vulnerabilities

TI-2026-40468 CVE-2026-56076 · GHSA-5fr5-2c3f-3fcr

PraisonAI - Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

HIGH 72

PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00637 Published 2026-06-18 Fixed in 1.5.128 CWE-942

TI-2026-40466 CVE-2026-56074 · GHSA-ffp3-3562-8cv3

PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching

MEDIUM 63

PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00176 Published 2026-06-18 Fixed in 1.5.128, 4.5.128 CWE-863

Vulnerabilities

Filters

PraisonAI - Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching