Multi-Agent Teams System Vulnerability in PraisonAI by MervinP raison

CVE-2026-47394

What is CVE-2026-47394?

A vulnerability in PraisonAI, a multi-agent teams system, allows unauthenticated users to access sensitive files on the host system, including system and personal credentials. This occurs due to incomplete remediation of earlier vulnerabilities, where certain handlers remained unchanged, allowing unauthorized access to files via the workflow.show and adjacent handlers. The affected version is prior to 4.6.40, which includes updated security fixes, emphasizing the necessity for timely upgrades to mitigate risks.

References