Unauthenticated Access Flaw in PraisonAI Gateway Component
CVE-2026-40149

7.9HIGH

Key Information:

Vendor

Mervinpraison

Status
Praisonai
Vendor
CVE Published:
9 April 2026

What is CVE-2026-40149?

The PraisonAI gateway’s /api/approval/allow-list endpoint allows unauthenticated users to modify the tool approval allowlist prior to version 4.5.128. If an auth_token is not configured, attackers can add harmful tool names (like shell_exec and file_write) to the allowlist. This misconfiguration lets the ExecApprovalManager auto-approve future agent invocations of these tools, effectively circumventing critical safety measures designed to ensure human oversight. This vulnerability was addressed in version 4.5.128.

Affected Version(s)

PraisonAI < 4.5.128

References

https://github.com/MervinPraison/PraisonAI/security/advis...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.