CVE-2026-56077 Details
Description
PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs. Attackers can exploit the lack of agent ID uniqueness enforcement to share ledger instances and expose system prompts and conversation history between agents.
An information disclosure vulnerability exists in PraisonAI versions prior to 1.5.115, specifically within the MultiAgentLedger component. This vulnerability allows attackers to access sensitive data by registering agents with duplicate IDs. The lack of enforcement for unique agent IDs enables the sharing of ledger instances, which can expose system prompts and conversation history between agents. Additionally, the MultiAgentMonitor component is susceptible to path traversal attacks, allowing arbitrary file read/write operations.
To address the information disclosure vulnerability, enforce unique agent IDs at the application level or modify the MultiAgentLedger to reject duplicate IDs. For the path traversal vulnerability, sanitize agent IDs to remove traversal sequences and ensure that file paths remain within the intended directories.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 18, 2026CISA-ADP
Assessed Jun 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MervinPraison/PraisonAI | [email protected] | ProductSource CodeVendor |
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-766v-q9x3-g744 | [email protected] | AdvisoryBundleExploitRemedyTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/praisonai-information-disclosure-via-shared-multiagentledger-state | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-668 | Exposure of Resource to Wrong Sphere | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MervinPraison PraisonAI | < 1.5.115 (semver) |
CPE
Remediation
| |
| MervinPraison PraisonAI Agents | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 23, 2026 | CVE Modified | CISA-ADP |
| Jun 18, 2026 | New CVE Received | [email protected] |