CVE-2026-56076 Details

A cross-origin agent execution vulnerability has been identified in PraisonAI versions prior to 1.5.128. The issue resides in the AGUI endpoint, specifically the POST /agui endpoint, which lacks authentication and includes hardcoded Access-Control-Allow-Origin: * headers. This vulnerability allows remote attackers to bypass CORS preflight checks using simple requests, exploiting Starlette's Content-Type-agnostic JSON parsing. As a result, attackers can trigger arbitrary agent executions and exfiltrate sensitive responses, including tool execution results and environment data.

Users are advised to update to PraisonAI version 1.5.128 or later. In addition, the hardcoded wildcard CORS headers should be removed and replaced with a configuration option that allows consumers to specify allowed origins. The AGUI endpoint should also be protected with authentication.