CVE-2026-57131 praisonai: Jobs API exposes agent-execution endpoints with no authentication
Unauthenticated attackers can execute arbitrary agent prompts and access job data in PraisonAI, leading to code execution and credential exposure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-57131?
CVE-2026-57131 is a critical missing authorization vulnerability in MervinPraison PraisonAI, published on 14 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PraisonAI is a multi-agent teams system. Prior to 4.6.58, praisonai.jobs.server.create_app mounts praisonai.jobs.router.create_router under /api/v1/runs without authentication or per-job authorization. Network clients can submit attacker-controlled prompts and agent configuration, list and read jobs, stream results, and cancel or delete other jobs, exposing service credentials and connected tool capabilities to unauthorized agent execution. This vulnerability is fixed in 4.6.58.
Which versions are affected by CVE-2026-57131?
3 open source packages ship an affected version, including praisonai.
| Package | Affected | Fixed in |
|---|---|---|
praisonai PyPI | All versions | 4.6.59 |
praisonai PyPI | All versions | 4.6.59 |
praisonai PyPI | All versions | 4.6.59 |
How do I fix CVE-2026-57131?
Upgrade praisonai to 4.6.59 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-57131 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-57131 exists.
Sources
Also known as GHSA-fq2m-6wqh-x44g, PYSEC-2026-3511.