CVE-2026-57137

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText() before invoking the onToolCall approval callback. Because the wrapped AI SDK executes tool handlers during generation, a callback that returns false records tool_rejected only after the denied tool has already produced side effects and populated toolResults. Applications using onToolCall as a human or policy approval boundary can therefore execute rejected file, command, API, or data-modifying operations. This issue is fixed in version 1.7.2.

• CWE-693
• CWE-862
• CWE-863

• https://github.com/MervinPraison/PraisonAI/commit/6b4b59fbe71a74983626c7a0cf7e10c47cd004f9
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.62
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h2w2-v7j6-xqm4
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h2w2-v7j6-xqm4

Published

Sep 15, 2026

Last Modified

Sep 15, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57131PraisonAI is a multi-agent teams system. Prior to 4.6.58, pr…9.8
• CVE-2026-57132PraisonAI is a multi-agent teams system. Prior to 4.6.62, se…8.2
• CVE-2026-57133PraisonAI is a multi-agent teams system. From 1.5.1 until 1.…8.8
• CVE-2026-57134PraisonAI is a multi-agent teams system. From 1.5.1 until 1.…8.2
• CVE-2026-57135PraisonAI is a multi-agent teams system. From 1.2.3 until 1.…7.6
• CVE-2026-57136PraisonAI is a multi-agent teams system. From 1.2.3 until 1.…8.8
• CVE-2026-57138PraisonAI is a multi-agent teams system. From 1.4.0 until 1.…9.9
• CVE-2026-57139PraisonAI is a multi-agent teams system. From 1.5.0 until 1.…9.8
• CVE-2026-5714The Enable Media Replace plugin for WordPress is vulnerable …6.4
• CVE-2026-57140PraisonAI is a multi-agent teams system. From 1.6.0 until 1.…9.4
• CVE-2026-57141PraisonAI is a multi-agent teams system. Prior to 1.7.2, the…9.8
• CVE-2026-57145PraisonAI is a multi-agent teams system. Prior to 4.6.62, sr…9.1