Is This vulnerability exploited in the wild?

No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

How severe is This vulnerability?

High severity, with a CVSS score of 8.8, published 19 June 2026.

Which products and versions are affected?

MervinPraison PraisonAI < 1.5.115; MervinPraison praisonaiagents <= 1.5.114.

Is there a fix for This vulnerability?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is This vulnerability attacked?

It is attacked over the network, in a software library.

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

PraisonAI path traversal and memory leakage in MultiAgent context handling

Q: Is there a fix for This vulnerability?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is This vulnerability attacked?

It is attacked over the network, in a software library.

Q: Am I affected?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Severity: high · CVSS 8.8 · Published 2026-06-19

PraisonAI, a framework for deploying AI agent workforces, contains vulnerabilities that could allow unauthorized access to sensitive data or system files. Attackers can exploit these flaws to read private conversation histories between AI agents or manipulate files on the underlying server. This could lead to the exposure of proprietary business logic, data theft, or a complete disruption of the AI service.

Quick answers

Is This vulnerability exploited in the wild?: No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.
How severe is This vulnerability?: High severity, with a CVSS score of 8.8, published 19 June 2026.
Which products and versions are affected?: MervinPraison PraisonAI < 1.5.115; MervinPraison praisonaiagents <= 1.5.114.
Is there a fix for This vulnerability?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is This vulnerability attacked?: It is attacked over the network, in a software library.
Am I affected?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

PraisonAI (specifically the praisonaiagents package) is vulnerable to two distinct issues in its multi-agent context handling. First, a path traversal vulnerability exists in the MultiAgentMonitor component because it fails to sanitize agent IDs before using them to construct file paths. An attacker with low privileges can use '../' sequences in an agent ID to read, write, or overwrite arbitrary files on the host system. Second, the MultiAgentLedger component suffers from memory state leakage because it does not enforce unique agent IDs; if two agents share an ID, they share the same ledger instance, allowing one agent to access another's system prompts and conversation history. These issues are addressed in version 1.5.115.

Affected products

MervinPraison PraisonAI < 1.5.115
MervinPraison praisonaiagents <= 1.5.114

Timeline

2026-04-07: advisory: Original GHSA-766v-q9x3-g744 published by vendor
2026-06-18: disclosed: CVE-2026-56078 published to NVD
2026-06-19: advisory: Duplicate advisory GHSA-fwh2-95jw-g4j6 published and withdrawn

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.