CVE-2026-57118

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /path/list, POST /path, and POST /path/agentid' without access-control checks before listing agents or calling agent.chat. A remotely exposed server can therefore let...

CVE-2026-57118

The praisonaiagents package (specifically versions prior to 1.6.59 ) contains a critical vulnerability in the AgentTeam.launch() and Agents.launch() methods. The underlying cause is a missing access-control check where the FastAPI server registers several routes—GET /{path}/list, POST /{path}, an...