CVE-2026-57140 Details
Description
PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and registers GET /api/agents and POST /api/chat without authentication middleware. A remote caller who can reach the service can obtain agent names, roles, and instruction prefixes and can invoke a selected agent, potentially reaching its tools, memory, external APIs, credentials, and workflow state. An initial remediation was released in version 1.7.2.
A vulnerability in the PraisonAI npm package, specifically in the AgentOS component, allows unauthenticated access to agent information and the ability to invoke agents without credentials. This issue affects PraisonAI versions 1.6.0 through 1.7.1. The AgentOS server, which defaults to an open network interface, exposes sensitive routes that can be exploited by remote attackers to access internal agent details and execute agent actions, potentially leading to unauthorized manipulation of data and workflows.
Users can update to PraisonAI version 1.7.2 or later, where this vulnerability has been addressed. The latest version can be downloaded from the PraisonAI GitHub releases page.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 15, 2026CISA-ADP
Assessed Sep 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MervinPraison/PraisonAI | >= 1.6.0, <= 1.7.1 (semver) |
CPE
Remediation
| |
| npm:praisonai | >= 1.6.0, <= 1.7.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 15, 2026 | CVE Modified | CISA-ADP |
| Sep 15, 2026 | New CVE Received | [email protected] |