PyPI/praisonaiagents CVE-2026-56074: medium 5.5

PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands

Action: Upgrade praisonaiagents to 4.5.128 or later.

pip install praisonaiagents==4.5.128

Affected

Fixed versions

Sources

• osv: PYSEC-2026-2946
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-ffp3-3562-8cv3
• https://nvd.nist.gov/vuln/detail/CVE-2026-56074
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128
• https://www.vulncheck.com/advisories/praisonai-tool-approval-cache-bypass-via-coarse-grained-caching
• https://pypi.org/project/praisonaiagents
• https://github.com/advisories/GHSA-ffp3-3562-8cv3

CVE-2026-56074 · published 2026-07-13T14:36:52.273166Z · modified 2026-10-19T12:15:03.158931701Z · JSON