CVE-2026-60087CWE-863

PraisonAI before 1.6.78 Tool Approval Cache Bypass

Medium · published July 15, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial approvals for subsequent calls with arbitrary arguments. Attackers can exploit this by obtaining approval for a benign operation and then executing dangerous file write operations with unreviewed parameters in the same session.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-07-15T11:25Z
EPSS history
Timeline
  • 15 JUL 11:25Z
    PraisonAI before 1.6.78 Tool Approval Cache Bypass
    cvelistv5