---
id: CVE-2026-57131
title: PraisonAI is a multi-agent teams system
summary: >-
  PraisonAI is a multi-agent teams system. Prior to 4.6.58,
  praisonai.jobs.server.create_app mounts praisonai.jobs.router.create_router
  under /api/v1/runs without authentication or per-job authorization. Network
  clients can submit attacker…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-94
  - CWE-306
  - CWE-862
vendor: MervinPraison
product: PraisonAI
affected:
  - PraisonAI < 4.6.48
patched:
  - praisonai 4.6.59
published: '2026-09-14'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T13:42:48.070'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-57131'
references:
  - url: >-
      https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1
    label: security-advisories@github.com
  - url: 'https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58'
    label: security-advisories@github.com
  - url: >-
      https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fq2m-6wqh-x44g
    label: security-advisories@github.com
  - url: >-
      https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fq2m-6wqh-x44g
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://github.com/MervinPraison/PraisonAI'
tags:
  - nvd
  - cve.org
  - exploit-available
  - osv
  - pip
epss: 0.00972
epssPercentile: 0.60523
aliases:
  - GHSA-fq2m-6wqh-x44g
ecosystem: pip
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-09-14T16:27:42.909723Z'
ingestedAt: '2026-07-21T19:04:57.122Z'
---

## Overview

PraisonAI is a multi-agent teams system. Prior to 4.6.58, praisonai.jobs.server.create_app mounts praisonai.jobs.router.create_router under /api/v1/runs without authentication or per-job authorization. Network clients can submit attacker-controlled prompts and agent configuration, list and read jobs, stream results, and cancel or delete other jobs, exposing service credentials and connected tool capabilities to unauthorized agent execution. This vulnerability is fixed in 4.6.58.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-57131)

Affected packages:

- `praisonai < 4.6.59`

Patched in:

- `praisonai 4.6.59`

Source: https://osv.dev/vulnerability/GHSA-fq2m-6wqh-x44g