PT-2026-31785 · Praisonai+1 · Praisonai+1

Published 2026-04-09 · Updated 2026-04-10 · CVE-2026-40116

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.128

Description PraisonAI is a multi-agent teams system. The /media-stream WebSocket endpoint in PraisonAI's call module accepts connections from any client without authentication or Twilio signature validation. Each connection establishes an authenticated session to OpenAI's Realtime API using the server's API key. There are no limits on concurrent connections, message rate, or message size, allowing an unauthenticated attacker to exhaust server resources and drain the victim's OpenAI API credits.

Recommendations Update to version 4.5.128 or later.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-40116

GHSA-Q5R4-47M9-5MC7

Affected Products

Openai Realtime Api

Praisonai

References · 8

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-q5r4-47m9-5mc7 · Exploit
• https://osv.dev/vulnerability/GHSA-q5r4-47m9-5mc7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40116 · Security Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128 · Note
• https://twitter.com/infoflowcloud/status/2042562288561856625 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2042420975258554544 · Twitter Post
• https://twitter.com/CVEnew/status/2042561838450442358 · Twitter Post