PyPI/praisonai CVE-2026-40149: high 7.9, EPSS 0.23%

PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls

Action: Upgrade praisonai to 4.5.128 or later.

pip install praisonai==4.5.128

Affected

Fixed versions

Sources

• osv: GHSA-4wr3-f4p3-5wjh
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4wr3-f4p3-5wjh
• https://nvd.nist.gov/vuln/detail/CVE-2026-40149
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128

CVE-2026-40149 · published 2026-04-10T19:24:11Z · modified 2026-07-13T16:42:53.881868954Z · JSON