CVE-2026-56074CWE-863broken-access-control

CVE-2026-56074

Medium · published June 19, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then silently exfiltrate API keys and credentials via subsequent shell commands without user consent.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-06-19T03:16Z
References (3)
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-ffp3-3562-8cv3 · [email protected]https://www.vulncheck.com/advisories/praisonai-tool-approval-cache-bypass-via-coarse-grained-caching · [email protected]https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-ffp3-3562-8cv3 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 18 JUN 22:12Z
    PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching
    cvelistv5