CVE-2026-40112

PraisonAI is a multi-agent teams system. Prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The _sanitize_html function relies on the nh3 library, which is not listed as a required or optional dependency in pyproject.toml. When nh3 is absent (the default installation), the sanitizer is a no-op that returns HTML unchanged. An attacker who can influence agent input (via RAG data poisoning, web scraping results, or prompt injection) can inject arbitrary JavaScript that executes in the browser of anyone viewing the API output. This vulnerability is fixed in 4.5.128.

• CWE-79

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfg2-mxfj-j6pwExploit, Vendor Advisory
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfg2-mxfj-j6pwExploit, Vendor Advisory

Published

Apr 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40107SiYuan is a personal knowledge management system. Prior to 3…6.5
• CVE-2026-40108GLPI is a free asset and IT management software package. In …7.1
• CVE-2026-40109Flux notification-controller is the event forwarder and noti…3.1
• CVE-2026-4011The Power Charts Lite plugin for WordPress is vulnerable to …6.4
• CVE-2026-40110Jupyter Server is the backend for Jupyter web applications. …7.3
• CVE-2026-40111PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…8.8
• CVE-2026-40113PraisonAI is a multi-agent teams system. Prior to 4.5.128, d…8.1
• CVE-2026-40114PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…10
• CVE-2026-40115PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…7.5
• CVE-2026-40116PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…7.5
• CVE-2026-40117PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…7.5
• CVE-2026-40118UDP Console provided by Arcserve contains an incorrectly spe…6.3