PyPI/praisonaiagents CVE-2026-55528: high 8.2, EPSS 0.49%

praisonaiagents: AgentServer declares auth_token but never enforces it on any route

Action: Upgrade praisonaiagents to 1.6.58 or later.

pip install praisonaiagents==1.6.58

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3899
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7g3p-92qq-8wvh
• https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58
• https://pypi.org/project/praisonaiagents
• https://github.com/advisories/GHSA-7g3p-92qq-8wvh
• https://nvd.nist.gov/vuln/detail/CVE-2026-55528

CVE-2026-55528 · published 2026-09-10T09:44:54.034901Z · modified 2026-09-10T12:15:10.980541071Z · JSON