---
id: CVE-2026-57118
title: PraisonAI is a multi-agent teams system
summary: >-
  PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59,
  AgentTeam.launch and the Agents alias register GET /{path}/list, POST /{path},
  and `POST /{path}/{agent_id}' without access-control checks before listing
  agents or…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-306
  - CWE-862
vendor: praisonaiagents
product: praisonaiagents
affected:
  - praisonaiagents < 1.6.59
patched:
  - praisonaiagents 1.6.59
published: '2026-10-12'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T16:00:33.533'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-57118'
references:
  - url: >-
      https://github.com/MervinPraison/PraisonAI/commit/b4270173d4123fb1ee8910588f0896668ee21b59
    label: security-advisories@github.com
  - url: 'https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.59'
    label: security-advisories@github.com
  - url: >-
      https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x8cv-xmq7-p8xp
    label: security-advisories@github.com
  - url: >-
      https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x8cv-xmq7-p8xp
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://github.com/MervinPraison/PraisonAI'
tags:
  - nvd
  - osv
  - pip
  - cve.org
  - exploit-available
epss: 0.00413
epssPercentile: 0.35387
aliases:
  - GHSA-x8cv-xmq7-p8xp
ecosystem: pip
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-15T13:38:13.240431Z'
ingestedAt: '2026-07-21T19:04:57.873Z'
---

## Overview

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /{path}/list, POST /{path}, and `POST /{path}/{agent_id}' without access-control checks before listing agents or calling agent.chat. A remotely exposed server can therefore let unauthenticated clients enumerate agents, consume model resources, access connected private context, and trigger agent tools or workflow side effects. This vulnerability is fixed in praisonaiagents 1.6.59.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-57118)

Affected packages:

- `praisonaiagents < 1.6.59`

Patched in:

- `praisonaiagents 1.6.59`

Source: https://osv.dev/vulnerability/GHSA-x8cv-xmq7-p8xp