CVE-2026-57116

Critical

Description

PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in releases after the published patched version for GHSA-pm96-6xpr-978x / CVE-2026-40151. The chat route directly calls agent.chat(request.message). No-auth and wrong-bearer requests both execute the deployed agent. This is broader than passive metadata disclosure. In any deployment where AgentOS wraps agents with tools, private context, memory, API integrations, or cost-bearing model calls, an unauthenticated reachable client can drive those agents. This issue has been patched in version 4.6.59.

SeverityCritical

CVSS9.8

Exploit probability—

ProductPraisonai

PublishedOct 23, 2026

First seenOct 23, 2026

Weakness typeCWE-200Sensitive information exposure CWE-306Missing authentication for critical function CWE-862Missing authorization

How to fix

Update

praisonai4.6.59 or later

Affected products

Product	Affected versions	Fixed in
praisonaiPyPI	4.2.1 ≤ v < 4.6.59	4.6.59

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.