SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-57125

CRITICAL · CVSS 9.8 Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-14 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

The vulnerability allows unauthenticated attackers to exploit the Jobs API in PraisonAI, enabling them to execute arbitrary operating system commands by manipulating the agent_yaml and bypassing critical approval checks. This poses a significant risk as it can lead to unauthorized access and control over the system without any user credentials or interaction. Organizations using versions prior to 4.6.59 of PraisonAI and 1.6.59 of PraisonAI agents should prioritize immediate updates to mitigate this critical security risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-57125
Severity
CRITICAL
CVSS
9.8
EPSS
N/A

Original NVD Description

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthenticated POST /api/v1/runs Jobs API accepts attacker-controlled agent_yaml, and the approve field can mark execute_command as YAML-approved before @require_approval checks critical tools. This chain allows a remote caller to cause a configured language model agent to invoke arbitrary operating-system commands without credentials or operator interaction. This vulnerability is fixed in praisonai 4.6.59 and praisonaiagents 1.6.59 as fixed versions.