PT-2026-31786 · Unknown · Praisonaiagents

Published 2026-04-09 · Updated 2026-04-10 · CVE-2026-40117

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PraisonAIAgents versions prior to 1.5.128

Description PraisonAIAgents is a multi-agent teams system. The read skill file() function in skill tools.py allows reading arbitrary files from the filesystem due to an unrestricted skill path parameter. Unlike file tools.read file which enforces workspace boundary confinement, and unlike run skill script which requires critical-level approval, read skill file lacks these protections. An agent influenced by prompt injection can exfiltrate sensitive files without triggering any approval prompt.

Recommendations Update PraisonAIAgents to version 1.5.128 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-40117

GHSA-GRRG-5CG9-58PF

Affected Products

Praisonaiagents

References · 7

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-grrg-5cg9-58pf · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-grrg-5cg9-58pf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40117 · Security Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://twitter.com/CVEnew/status/2042561837309571373 · Twitter Post
• https://twitter.com/infoflowcloud/status/2042562329636683839 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2042418414375858643 · Twitter Post