Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs. Attackers can exploit the lack of agent ID uniqueness enforcement to share ledger instances and expose system prompts and conversation history between agents.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56077 Information Disclosure in PraisonAI MultiAgentLedger via Duplicate Agent ID Registration https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56077
Post summary
The entry announces CVE-2026-56077, detailing an information disclosure flaw in PraisonAI's MultiAgentLedger due to duplicate Agent ID registration, with no evidence of exploitation or patches.
🚨*CVE* CVE-2026-56077 PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by register… https://www.cve.org/CVERecord?id=CVE-2026-56077 ----- Traducción: CVE-2026-56077 Pra… http://infoflow.cloud`
Post summary
The post notes CVE-2026-56077 as an information‑disclosure flaw affecting PraisonAI versions below 1.5.115, with no evidence of PoC, exploitation, or patching.
CVE-2026-56077 PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by register… https://www.cve.org/CVERecord?id=CVE-2026-56077
Post summary
The post discloses an information disclosure flaw in PraisonAI versions before 1.5.115, where the MultiAgentLedger component can expose sensitive data during registration.