Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution. The POST /agui endpoint lacks authentication and hardcodes Access-Control-Allow-Origin: * headers, combined with Starlette's Content-Type-agnostic JSON parsing, enabling attackers to bypass CORS preflight checks via simple requests and exfiltrate sensitive agent responses including tool execution results and environment data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56076 Cross-Origin Agent Execution Vulnerability in PraisonAI Before 1.5.128 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56076
Post summary
The text lists CVE-2026-56076 as a Cross-Origin Agent Execution issue in PraisonAI prior to version 1.5.128, providing a link to vulnerability details but no evidence of PoC, exploit code, active exploitation, or patch information.
🚨*CVE* CVE-2026-56076 PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution.… https://www.cve.org/CVERecord?id=CVE-2026-56076 ----- Traducción: CVE-2026-56076 Pra… http://infoflow.cloud`
Post summary
The message reports CVE-2026-56076, a cross-origin agent execution flaw in PraisonAI’s AGUI endpoint, without any proof of concept, exploit code, or patch information.
CVE-2026-56076 PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution.… https://www.cve.org/CVERecord?id=CVE-2026-56076
Post summary
The post announces CVE-2026-56076, describing a cross‑origin agent execution flaw in PraisonAI that permits remote arbitrary agent execution before version 1.5.128.