All vulnerabilities
CVE-2026-57116GHSA-892r-p3jq-jp24PYSEC-2026-3507

PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation

MervinPraison PraisonAIPyPILibraries & packages
Open in ThreatlineRecord JSON
CVSS
9.8Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in4.6.59Fixed versionOSV
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 4.6.59praisonai, PyPIOSVpip install "praisonai>=4.6.59"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in releases after the published patched version for GHSA-pm96-6xpr-978x / CVE-2026-40151. The chat route directly calls agent.chat(request.message). No-auth and wrong-bearer requests both execute the deployed agent. This is broader than passive metadata disclosure. In any deployment where AgentOS wraps agents with tools, private context, memory, API integrations, or cost-bearing model calls, an unauthenticated reachable client can drive those agents. This issue has been patched in version 4.6.59.

Text from CVE List

Affected versions 52

  • PraisonAIaffected: >= 4.2.1, < 4.6.59CVE List
  • praisonai, PyPIfrom 4.2.1, fixed in 4.6.59OSV
  • praisonai, PyPI4.2.1OSV
  • praisonai, PyPI4.2.2OSV
  • praisonai, PyPI4.2.3OSV
  • praisonai, PyPI4.2.4OSV
  • praisonai, PyPI4.3.0OSV
  • praisonai, PyPI4.3.1OSV
  • praisonai, PyPI4.4.0OSV
  • praisonai, PyPI4.4.10OSV
  • praisonai, PyPI4.4.11OSV
  • praisonai, PyPI4.4.12OSV
  • praisonai, PyPI4.4.2OSV
  • praisonai, PyPI4.4.3OSV
  • praisonai, PyPI4.4.4OSV
  • praisonai, PyPI4.4.5OSV
  • praisonai, PyPI4.4.6OSV
  • praisonai, PyPI4.4.7OSV
  • praisonai, PyPI4.4.8OSV
  • praisonai, PyPI4.4.9OSV
  • praisonai, PyPI4.5.0OSV
  • praisonai, PyPI4.5.1OSV
  • praisonai, PyPI4.5.10OSV
  • praisonai, PyPI4.5.100OSV
  • praisonai, PyPI4.5.101OSV
  • praisonai, PyPI4.5.102OSV
  • praisonai, PyPI4.5.103OSV
  • praisonai, PyPI4.5.104OSV
  • praisonai, PyPI4.5.105OSV
  • praisonai, PyPI4.5.106OSV
  • praisonai, PyPI4.5.107OSV
  • praisonai, PyPI4.5.108OSV
  • praisonai, PyPI4.5.109OSV
  • praisonai, PyPI4.5.11OSV
  • praisonai, PyPI4.5.110OSV
  • praisonai, PyPI4.5.111OSV
  • praisonai, PyPI4.5.112OSV
  • praisonai, PyPI4.5.113OSV
  • praisonai, PyPI4.5.114OSV
  • praisonai, PyPI4.5.115OSV
  • praisonai, PyPI4.5.117OSV
  • praisonai, PyPI4.5.118OSV
  • praisonai, PyPI4.5.119OSV
  • praisonai, PyPI4.5.12OSV
  • praisonai, PyPI4.5.120OSV
  • praisonai, PyPI4.5.121OSV
  • praisonai, PyPI4.5.122OSV
  • praisonai, PyPI4.5.123OSV
  • praisonai, PyPI4.5.124OSV
  • praisonai, PyPI4.5.125OSV
  • praisonai, PyPI4.5.126OSV
  • praisonai, PyPI4.5.127OSV

References 1