PT-2026-31456 · Praisonai · Praisonai

Published 2026-04-08 · Updated 2026-04-08 · CVE-2026-39889

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.115

Description PraisonAI's Agent-to-User (A2U) event stream server, prior to version 4.5.115, lacks authentication, exposing all agent activity. The create a2u routes() function registers several API endpoints without authentication checks, including: /a2u/info, /a2u/subscribe, /a2u/events/{stream name}, /a2u/events/sub/{id}, and /a2u/health. An unauthenticated attacker can subscribe to event streams and receive live updates of all agent events, including responses, tool calls, and internal reasoning. The vulnerable parameters include stream name and subscription id used in the API endpoints. This exposure can reveal sensitive agent activity to network attackers.

Recommendations Update PraisonAI to version 4.5.115 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-39889

GHSA-F292-66H9-FPMF

Affected Products

Praisonai

References · 6

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f292-66h9-fpmf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39889 · Security Note
• https://osv.dev/vulnerability/GHSA-f292-66h9-fpmf · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI · Note
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.115 · Note
• https://twitter.com/CVEnew/status/2041999832298951059 · Twitter Post