CVE-2026-57116

PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in releases after the published patched version for GHSA-pm96-6xpr-978x / CVE-2026-40151. The chat route directly calls agent.chat(request.message). No-auth and wrong-bearer requests both execute the deployed agent. This is broader than passive metadata disclosure. In any deployment where AgentOS wraps agents with tools, private context, memory, API integrations, or cost-bearing model calls, an unauthenticated reachable client can drive those agents. This issue has been patched in version 4.6.59.

• CWE-200
• CWE-306
• CWE-862

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-892r-p3jq-jp24
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-892r-p3jq-jp24

Published

Oct 23, 2026

Last Modified

Oct 29, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5711The Post Blocks & Tools plugin for WordPress is vulnerable t…6.4
• CVE-2026-57111Permissive Cross-Origin Resource Sharing (CORS) in the REST …7.5
• CVE-2026-57112PraisonAI is a multi-agent teams system. From praisonaiagent…8.3
• CVE-2026-57113PraisonAI is a multi-agent teams system. From version 2.6.0 …8.1
• CVE-2026-57114PraisonAI is a multi-agent teams system. From version 4.5.12…7.2
• CVE-2026-57115PraisonAI is a multi-agent teams system. Prior to praisonaia…6.5
• CVE-2026-57117PraisonAI is a multi-agent teams system. From version 4.6.10…8.8
• CVE-2026-57118PraisonAI is a multi-agent teams system. Prior to praisonaia…9.8
• CVE-2026-57119PraisonAI is a multi-agent teams system. Prior to 4.6.59, th…7.5
• CVE-2026-5712This vulnerability impacts all versions of IdentityIQ and al…8.8
• CVE-2026-57120PraisonAI is a multi-agent teams system. Prior to praisonaia…6.5
• CVE-2026-57121PraisonAI is a multi-agent teams system. From version 0.1.4 …8.1