Key points
- CVE-2026-57118 allows unauthenticated access to agent lists and chat functions.
- The flaw affects PraisonAI versions prior to praisonaiagents 1.6.59.
- Attackers can consume model resources and access private context without login.
Organizations using PraisonAI must update their systems immediately to address a critical security flaw. The vulnerability, identified as CVE-2026-57118, allows anyone on the internet to interact with the system without credentials. This exposure risks data leakage and unauthorized resource consumption for any remotely exposed server.
In plain English
The PraisonAI platform enables teams of AI agents to work together. Before version 1.6.59, the software failed to check if users were logged in. This meant that anyone could send requests to list available agents or start conversations with them. There were no security gates to stop these actions.
The background
According to the National Vulnerability Database, the issue stems from missing access-control checks. Specific endpoints for listing agents and initiating chats were left open. This allows unauthenticated clients to enumerate agents and trigger tools. The flaw is rated CVSS 9.8, which is considered critical severity.
What changes now
The vendor has released praisonaiagents version 1.6.59 to fix this issue. This update adds the necessary authentication checks to the affected endpoints. Users running older versions of MervinPraison PraisonAI or praisonaiagents are currently vulnerable. Updating to the latest version is the only confirmed mitigation.
What to do and how to stay safe: PraisonAI
- Check your current PraisonAI and praisonaiagents versions against the 1.6.59 threshold.
- Review server logs for unauthorized access attempts to agent listing or chat endpoints.
- Ensure your PraisonAI servers are not directly exposed to the public internet without protection.
- Monitor for unusual resource consumption that might indicate automated exploitation.
Step-by-step guide: Emergency Patching: How to Fix Critical Flaws Without Breaking Systems
General security guidance from the Patch Review newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is CVE-2026-57118?
It is a critical vulnerability in PraisonAI that allows unauthenticated users to access agent data and functions.
Which versions are affected?
All versions of praisonaiagents prior to 1.6.59 and MervinPraison PraisonAI prior to 4.6.59 are affected.
Is there a fix available?
Yes, the vulnerability is fixed in praisonaiagents version 1.6.59.
