Is CVE-2026-57131 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-57131 being exploited in the wild.

How severe is CVE-2026-57131?

Critical severity, with a CVSS score of 9.8, published 14 September 2026.

Which products and versions are affected?

praisonai (PyPI) ECOSYSTEM:introduced=0,fixed=4.6.59.

Is there a fix for CVE-2026-57131?

Yes. praisonai (PyPI): upgrade to 4.6.59 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-57131 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-57131?

Check whether you run praisonai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-57131: PraisonAI unauthenticated API access to jobs endpoint

CVE-2026-57131 · Severity: critical · CVSS 9.8 · Published 2026-09-14

PraisonAI is a multi-agent AI orchestration platform that manages automated teams of AI agents. The platform exposes its job management API without authentication, allowing anyone with network access to submit arbitrary agent tasks, read sensitive job data, steal service credentials, and manipulate or delete other users' jobs. This creates a complete takeover risk for any organization running PraisonAI without external authentication controls.

Technologies: praisonai (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2026-57131 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-57131 being exploited in the wild.
How severe is CVE-2026-57131?: Critical severity, with a CVSS score of 9.8, published 14 September 2026.
Which products and versions are affected?: praisonai (PyPI) ECOSYSTEM:introduced=0,fixed=4.6.59.
Is there a fix for CVE-2026-57131?: Yes. praisonai (PyPI): upgrade to 4.6.59 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-57131 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-57131?: Check whether you run praisonai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

praisonai (PyPI): upgrade to 4.6.59 or later
```
pip install "praisonai>=4.6.59"
```

Technical details

The vulnerability is an authentication bypass in the praisonai.jobs.server.create_app function, which mounts the job management router (praisonai.jobs.router.create_router) at /api/v1/runs without any authentication or authorization checks. A network-accessible attacker can call these endpoints to submit attacker-controlled prompts and agent configurations, enumerate and read job details and results, stream job output, and cancel or delete other jobs. The attack requires only network reachability to the API endpoint; no credentials or user interaction are required. This exposes service credentials configured in agents and the capabilities of connected tools to arbitrary execution. The vulnerability is fixed in version 4.6.58 by adding input validation, query parameterization, and authentication controls.

Affected products

Mervin Praison PraisonAI prior to 4.6.58

Identifiers

CVE-2026-57131
GHSA-fq2m-6wqh-x44g
PYSEC-2026-3511

Timeline

2026-09-14: disclosed
2026-06-13: patched: Version 4.6.58 released with authentication and input validation hardening

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.