CVE-2026-40116

PraisonAI is a multi-agent teams system. Prior to 4.5.128, the /media-stream WebSocket endpoint in PraisonAI's call module accepts connections from any client without authentication or Twilio signature validation. Each connection opens an authenticated session to OpenAI's Realtime API using the server's API key. There are no limits on concurrent connections, message rate, or message size, allowing an unauthenticated attacker to exhaust server resources and drain the victim's OpenAI API credits. This vulnerability is fixed in 4.5.128.

• CWE-770

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-q5r4-47m9-5mc7Exploit, Vendor Advisory
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-q5r4-47m9-5mc7Exploit, Vendor Advisory

Published

Apr 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40110Jupyter Server is the backend for Jupyter web applications. …7.3
• CVE-2026-40111PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…8.8
• CVE-2026-40112PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…6.1
• CVE-2026-40113PraisonAI is a multi-agent teams system. Prior to 4.5.128, d…8.1
• CVE-2026-40114PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…10
• CVE-2026-40115PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…7.5
• CVE-2026-40117PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…7.5
• CVE-2026-40118UDP Console provided by Arcserve contains an incorrectly spe…6.3
• CVE-2026-4012A vulnerability was determined in rxi fe up to ed4cda96bd582…3.3
• CVE-2026-40127OutSystems Lifetime is vulnerable to Authorization Bypass Th…5.3
• CVE-2026-40128SAP NetWeaver Application Server Java (Web Container) allows…9
• CVE-2026-40129Due to a Code Injection vulnerability in SAP Application Ser…4.3