Executive brief
The tool approval system in PraisonAI Agents caches decisions by tool name only, allowing subsequent unauthorized command execution and potential credential exfiltration.
Affected products
- MervinPraison PraisonAI Agents
Junglewise Threat Intelligence
MervinPraison PraisonAI authorization bypass in tool approval system
Severity: medium · CVSS 5.5 · Published 2026-04-10
Technologies: MervinPraison PraisonAI Agents. Vendors: MervinPraison.
Related threats
- PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token but AgentServer._creat
- PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resolve ordinary hostname
- PraisonAI Agents SSRF in web_crawl tool via redirect and DNS rebinding
- MervinPraison PraisonAI sandbox escape in execute_code tool
- MervinPraison PraisonAI path traversal in MultiAgentMonitor