PT-2026-50808 · Praisonai · Praisonai

Published 2026-06-18 · Updated 2026-06-19 · CVE-2026-56077

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.5.115

Description An information disclosure issue exists in the MultiAgentLedger component. The system fails to enforce the uniqueness of agent IDs, allowing attackers to register agents with duplicate IDs. This flaw enables the sharing of ledger instances, which can expose sensitive data, including system prompts and conversation history between agents.

Recommendations Update to version 1.5.115 or later.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2026-56077

Affected Products

Praisonai

References · 6

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-766v-q9x3-g744 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56077 · Security Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://twitter.com/CVEnew/status/2067788101456466287 · Twitter Post
• https://vulncheck.com/advisories/praisonai-information-disclosure-via-shared-multiagentledger-state · Note
• https://twitter.com/infoflowcloud/status/2067789695619153976 · Twitter Post