CVE-2026-56074

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.5.128

Description The software caches tool approval decisions based solely on the tool name rather than the invocation arguments. This allows subsequent calls to the execute command() function to bypass approval prompts. An attacker can obtain initial approval for a benign command and then silently exfiltrate API keys and credentials using subsequent shell commands without user consent.

Recommendations Update to version 1.5.128 or later.