CVE-2026-56076

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.5.128

Description A cross-origin agent execution issue exists in the 'POST /agui' endpoint, allowing remote attackers to trigger arbitrary agent execution. The endpoint lacks authentication and utilizes hardcoded Access-Control-Allow-Origin: * headers. Combined with Starlette's Content-Type-agnostic JSON parsing, this allows attackers to bypass Cross-Origin Resource Sharing (CORS) preflight checks—a security mechanism that restricts how resources on a web page can be requested from another domain—via simple requests. This can lead to the exfiltration of sensitive agent responses, including environment data and tool execution results.

Recommendations Update to version 1.5.128 or later.