Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/06/18 10:12 p.m.24 views

CVE-2026-56074 PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching

PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent executecommand calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then silently exfiltrate API keys and...

6.8CVSS0.00166EPSS
SaveExploits0References2
Rows per page
Query Builder