CVE-2026-40117Disclosure(praison / praisonaiagents)

LOWCVSS 7.5 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, read_skill_file() in skill_tools.py allows reading arbitrary files from the filesystem by accepting an unrestricted skill_path parameter. Unlike file_tools.read_file which enforces workspace boundary confinement, and unlike run_skill_script which requires critical-level approval, read_skill_file has neither protection. An agent influenced by prompt injection can exfiltrate sensitive files without triggering any approval prompt. This vulnerability is fixed in 1.5.128.

praison CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-grrg-5cg9-58pf

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

praisonaiagents

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Affected systems

Vendors

praison

Products

praisonaiagents

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud183d
Disclosure
🚨*CVE* CVE-2026-40117 PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, read_skill_file() in skill_tools.py allows reading arbitrary files from the filesystem by accepting a… https://www.cve.org/CVERecord?id=CVE-2026-40117 ----- Traducción: CVE-2026-40117 Pra… http://infoflow.cloud`
Post summary
The text announces CVE-2026-40117, indicating an arbitrary file read vulnerability in the read_skill_file() function prior to version 1.5.128.
0000028
67 followersView on X
CVE@CVEnew183d
Disclosure
CVE-2026-40117 PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, read_skill_file() in skill_tools.py allows reading arbitrary files from the filesystem by accepting a… https://www.cve.org/CVERecord?id=CVE-2026-40117
Post summary
The text discloses that the PraisonAIAgents tool had a file‑read vulnerability in read_skill_file() before version 1.5.128, without providing a PoC, patch, or evidence of exploitation.
00000145
57.0K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds183d
Disclosure
CVE-2026-40117 Arbitrary File Read in PraisonAIAgents Prior to Version 1.5.128 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40117
Post summary
The text announces CVE-2026-40117 as an Arbitrary File Read vulnerability in PraisonAIAgents before v1.5.128, linking to a details page, with no evidence of active exploitation, patches, PoC, or false claims.
0000042
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	praison	praisonaiagents	-	-	-

Explore more

Back to dashboard praison CVEs praisonaiagents vulnerabilities