CVE-2026-40159

PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI’s MCP (Model Context Protocol) integration allows spawning background servers via stdio using user-supplied command strings (e.g., MCP("npx -y @smithery/cli ...")). These commands are executed through Python’s subprocess module. By default, the implementation forwards the entire parent process environment to the spawned subprocess. As a result, any MCP command executed in this manner inherits all environment variables from the host process, including sensitive data such as API keys, authentication tokens, and database credentials. This behavior introduces a security risk when untrusted or third-party commands are used. In common scenarios where MCP tools are invoked via package runners such as npx -y, arbitrary code from external or potentially compromised packages may execute with access to these inherited environment variables. This creates a risk of unintended credential exposure and enables potential supply chain attacks through silent exfiltration of secrets. This vulnerability is fixed in 4.5.128.

• CWE-200
• CWE-214

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-pj2r-f9mw-vrcqVendor Advisory

Published

Apr 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40153PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…6.5
• CVE-2026-40154PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…9.6
• CVE-2026-40155The Auth0 Next.js SDK is a library for implementing user aut…5.4
• CVE-2026-40156PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…7.8
• CVE-2026-40157PraisonAI is a multi-agent teams system. Prior to 4.5.128, c…8.8
• CVE-2026-40158PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…7.8
• CVE-2026-4016A security vulnerability has been detected in GPAC 26.03-DEV…5.3
• CVE-2026-40160PraisonAIAgents is a multi-agent teams system. Prior to 1.5.…6.5
• CVE-2026-40161Tekton Pipelines project provides k8s-style resources for de…6.5
• CVE-2026-40162Bugsink is a self-hosted error tracking tool. In 2.1.0, an a…7.1
• CVE-2026-40163Saltcorn is an extensible, open source, no-code database app…8.2
• CVE-2026-40164jq is a command-line JSON processor. Before commit 0c7d133c3…7.5