{"data":{"id":"90200900-ae95-4522-8543-db9702965f8e","title":"CVE-2026-57125: PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthenticated POST…","summary":"PraisonAI, a multi-agent teams system, has a flaw in its unauthenticated POST /api/v1/runs Jobs API before praisonai 4.6.59 and praisonaiagents 1.6.59. The endpoint accepts attacker-controlled agent_yaml, and its approve field can mark execute_command as YAML-approved before @require_approval checks critical tools. A remote caller can thereby make a configured language model agent run arbitrary operating-system commands without credentials or operator interaction.","solution":"This vulnerability is fixed in praisonai 4.6.59 and praisonaiagents 1.6.59.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-57125","publishedAt":"2026-09-14T15:17:05.900Z","cveId":"CVE-2026-57125","cweIds":["CWE-306","CWE-863"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["praisonai@<= 4.6.48 (fixed: 4.6.59)","praisonaiagents@< 1.6.59 (fixed: 1.6.59)"],"affectedPackageNames":["praisonai","praisonaiagents"],"affectedPackageRefs":["pypi:praisonai","pypi:praisonaiagents"],"affectedVendors":[],"affectedVendorsRaw":["PraisonAI","praisonaiagents"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PraisonAI unauthenticated command execution through POST /api/v1/runs Jobs API","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00601,"epssCheckedAt":"2026-11-04T12:08:34.077Z","kevDateAdded":null,"advisoryAliases":["GHSA-4869-x4pr-q22x"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:43:51.565Z","patchAvailable":true,"disclosureDate":"2026-09-14T15:17:05.900Z","fixReleasedAt":"2026-06-17T07:24:04.760Z","daysToFix":-89,"fixCheckedAt":"2026-10-29T21:30:40.576Z","capecIds":["CAPEC-115","CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"praisonai","fixedVersion":"4.6.59","matchedVersion":"4.6.59","fixReleasedAt":"2026-06-17T07:25:20.267Z","daysToFix":-89,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:30:40.430Z"},{"ecosystem":"pypi","name":"praisonaiagents","fixedVersion":"1.6.59","matchedVersion":"1.6.59","fixReleasedAt":"2026-06-17T07:24:04.760Z","daysToFix":-89,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:30:40.430Z"}]}}