CVE-2026-40149

PraisonAI is a multi-agent teams system. Prior to 4.5.128, the gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool approval allowlist when no auth_token is configured (the default). By adding dangerous tool names (e.g., shell_exec, file_write) to the allowlist, an attacker can cause the ExecApprovalManager to auto-approve all future agent invocations of those tools, bypassing the human-in-the-loop safety mechanism that the approval system is specifically designed to enforce. This vulnerability is fixed in 4.5.128.

• CWE-396

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4wr3-f4p3-5wjhExploit, Vendor Advisory
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4wr3-f4p3-5wjhExploit, Vendor Advisory

Published

Apr 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40138A critical pre-authentication vulnerability exists in the au…8.1
• CVE-2026-40139A critical pre-authentication vulnerability exists in the au…9.8
• CVE-2026-4014A security flaw has been discovered in itsourcecode Cafe Res…9.8
• CVE-2026-40140BeyondTrust Remote Support and Privileged Remote Access cont…7.5
• CVE-2026-40141A high-severity vulnerability exists in a web application co…9.9
• CVE-2026-40148PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…6.5
• CVE-2026-4015A weakness has been identified in GPAC 26.03-DEV. Affected i…5.3
• CVE-2026-40150PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…6.5
• CVE-2026-40151PraisonAI is a multi-agent teams system. Prior to 4.5.128, t…5.3
• CVE-2026-40152PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…5.3
• CVE-2026-40153PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…6.5
• CVE-2026-40154PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…9.6