Credential Leakage Vulnerability in PraisonAI by Mervin Praison

CVE-2026-40313

What is CVE-2026-40313?

PraisonAI, a multi-agent teams system, contains a crucial vulnerability in its GitHub Actions workflows, specifically in versions 4.5.139 and earlier. This flaw can lead to an ArtiPACKED attack, where sensitive tokens such as GITHUB_TOKEN and ACTIONS_RUNTIME_TOKEN are improperly stored in the .git/config file due to the default configuration of actions/checkout. If any subsequent workflow steps upload artifacts, these tokens may be unintentionally included, allowing any user with read access to the public repository to download such artifacts. This exposes the tokens, enabling malicious actors to push harmful code, corrupt release processes, and execute a comprehensive supply chain compromise that affects all downstream users. The vulnerability has been addressed in version 4.5.140.

References