PT-2026-61784 · Unknown · Praisonaiagents

CVE-2026-57130

·

Published

2026-06-18

·

Updated

2026-07-23

CVSS v3.1

8.1

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions praisonai-agents (affected versions not specified)
Description The email search tool in src/praisonai-agents/praisonaiagents/tools/email tools.py is susceptible to IMAP injection. The issue occurs because the tool constructs IMAP SEARCH commands by directly interpolating parameters into protocol strings using f-string formatting without proper sanitization or escaping. An attacker can influence these arguments via crafted agent prompts to break out of the quoted string context using double-quote characters.
This affects the following components:
  • API Endpoints: The search emails, reply email, and archive email public tool functions.
  • Vulnerable Parameters: from addr, subject, query, search id, and message id.
Successful exploitation allows an attacker to inject arbitrary IMAP commands, which can lead to the termination of IMAP connections, exfiltration of email data from unauthorized folders, or the permanent deletion of emails using DELETE and EXPUNGE commands.
Recommendations
  • Escape double-quote characters in all IMAP parameters to prevent breaking the quoted string context.
  • Implement IMAP literal syntax ({n}r data) instead of quoted strings for the from addr, subject, query, search id, and message id parameters.
  • Restrict the use of the search emails, reply email, and archive email functions until the parameters are properly sanitized.

Fix

RCE

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20CWE-77

Related Identifiers

CVE-2026-57130
GHSA-C969-5X3P-VQ3V
PYSEC-2026-3532

Affected Products

Praisonaiagents