PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-56077 PraisonAI CVE debrief

CVE-2026-56077 is a high-severity information disclosure vulnerability in the MultiAgentLedger component of PraisonAI versions before 1.5.115. This vulnerability allows attackers to access sensitive data by registering agents with duplicate IDs, exploiting the lack of agent ID uniqueness enforcement. Consequently, attackers can share ledger instances and expose system prompts and conversation history between agents. The vulnerability has a CVSS score of 7.1 and is considered high severity. Organizations using affected PraisonAI versions should take immediate action to mitigate this risk.

Vendor
PraisonAI
Product
Unknown
CVSS
HIGH 7.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-18
Original CVE updated
2026-06-23
Advisory published
2026-06-18
Advisory updated
2026-06-23

Who should care

Security teams and administrators responsible for PraisonAI installations, particularly those using versions before 1.5.115, should be aware of this vulnerability. Given the high severity and potential for sensitive data exposure, prompt action is recommended to secure affected systems.

Technical summary

The MultiAgentLedger component in PraisonAI before version 1.5.115 does not enforce unique agent IDs. This oversight allows attackers to register agents with duplicate IDs, which can be exploited to share ledger instances. By doing so, attackers can gain access to system prompts and conversation history between agents, leading to information disclosure. The vulnerability is characterized by a CVSS:4.0 vector of AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X, with a CVSS score of 7.1, indicating high severity.

Defensive priority

High

Recommended defensive actions

  • Update PraisonAI to version 1.5.115 or later to enforce unique agent IDs.
  • Implement additional monitoring to detect suspicious agent registration activities.
  • Restrict access to the MultiAgentLedger component to trusted users only.
  • Regularly review and update access controls for PraisonAI components.
  • Consider implementing a Web Application Firewall (WAF) to detect and prevent exploitation attempts.
  • Conduct regular security audits and vulnerability assessments for PraisonAI and related components.

Evidence notes

The information provided is based on data from the National Vulnerability Database (NVD) and other reliable sources. The CVE record and NVD detail pages offer comprehensive information about CVE-2026-56077, including its description, CVSS score, and affected products. Additional details can be found in the source references provided.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-56077 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-56077

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-56077 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-56077

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.