Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/23 1:17 p.m.•16 views

CVE-2026-57146

PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the same A2U subscription and event routes without...

7.5CVSS0.0049EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/23 12:08 p.m.•19 views

EUVD-2026-108900

PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the same A2U subscription and event routes without...

7.5CVSS5.8AI score0.0049EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/23 12:08 p.m.•9 views

CVE-2026-57146 PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default

PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the same A2U subscription and event routes without...

7.5CVSS5.8AI score0.0049EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/23 12:08 p.m.•33 views

CVE-2026-57146 PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default

PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the same A2U subscription and event routes without...

7.5CVSS0.0049EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/23 12:08 p.m.•41 views

CVE-2026-57146

The PraisonAI multi-agent system (versions 4.5.115 to 4.6.58 ) contains an incomplete authentication fix in the A2U Agent-to-User event stream server . When using the documented CLI entrypoint (praisonai serve a2u), the system fails to install API-key middleware or generate a default token. Inste...

7.5CVSS5.8AI score0.0049EPSS
SaveExploits0References1
Mend
Mend
•added 2026/07/20 11:50 p.m.•15 views

CVE-2026-57146

The published A2U advisory "GHSA-f292-66h9-fpmf" says unauthenticated A2U event streaming was fixed in "praisonai" "4.5.115". Current head still exposes the same A2U subscription and event routes without authentication when the operator starts the documented CLI entrypoint: The current CLI wrappe...

8.7CVSS5.9AI score0.0049EPSS
SaveExploits0References5
Rows per page
Query Builder