{"action":"Upgrade praisonaiagents to 4.5.128 or later.","affected":[{"fixed":"4.5.128","introduced":"0"}],"component":"praisonaiagents","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["4.5.128"],"ghsa_id":"GHSA-x462-jjpc-q4q4","id":"tcs_01M5KG3E2XTKYM1M9YGXY350CM","modified_at":"2026-09-10T03:51:03.837299604Z","published_at":"2026-04-10T19:28:23Z","references":["https://osv.dev/vulnerability/GHSA-x462-jjpc-q4q4","https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x462-jjpc-q4q4","https://github.com/MervinPraison/PraisonAI","https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-x462-jjpc-q4q4","url":"https://osv.dev/vulnerability/GHSA-x462-jjpc-q4q4"}],"summary":"PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint"}