Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PraisonAI is a multi-agent teams system. Prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The _sanitize_html function relies on the nh3 library, which is not listed as a required or optional dependency in pyproject.toml. When nh3 is absent (the default installation), the sanitizer is a no-op that returns HTML unchanged. An attacker who can influence agent input (via RAG data poisoning, web scraping results, or prompt injection) can inject arbitrary JavaScript that executes in the browser of anyone viewing the API output. This vulnerability is fixed in 4.5.128.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-40112 PraisonAI is a multi-agent teams system. Prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization.… https://www.cve.org/CVERecord?id=CVE-2026-40112
Post summary
The CVE-2026-40112 vulnerability in PraisonAI’s Flask API endpoint involves unsanitized HTML rendering, potentially enabling XSS attacks, with no PoC, exploit, or patch discussed.
🚨*CVE* CVE-2026-40112 PraisonAI is a multi-agent teams system. Prior to 4.5.128, the Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization.… https://www.cve.org/CVERecord?id=CVE-2026-40112 ----- Traducción: CVE-2026-40112 Pra… http://infoflow.cloud`
Post summary
The post announces a CVE affecting PraisonAI’s Flask API with unsanitized HTML output, offering only basic disclosure information without PoC, exploit, or patch details.
CVE-2026-40112 Cross-Site Scripting in PraisonAI Flask API Endpoint Prior to 4.5.128 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40112
Post summary
The brief text discloses a CVE-2026-40112 involving XSS in PraisonAI's Flask API endpoint, without providing PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | praison | praisonai | - | - | - |