What is the CVSS score of CVE-2026-40151?

CVE-2026-40151 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Is there a public PoC exploit available for CVE-2026-40151?

Yes, a public proof-of-concept exploit is available for CVE-2026-40151. Prioritise patching immediately. EPSS: 0.0%.

Is there a patch available for CVE-2026-40151?

Yes, a patch is available for CVE-2026-40151. Update the affected software to the latest version immediately.

Praisonai CVE-2026-40151

EUVD-2026-21172 MEDIUM

Information Exposure (CWE-200)

2026-04-09 GitHub_M

GHSA-pm96-6xpr-978x

Information Disclosure Praisonai

5.3

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Apr 10, 2026 - 20:30 nvd

Patch available

EUVD ID Assigned

Apr 09, 2026 - 21:45 euvd

EUVD-2026-21172

Analysis Generated

Apr 09, 2026 - 21:45 vuln.today

CVE Published

Apr 09, 2026 - 21:29 nvd

MEDIUM 5.3

DescriptionGitHub Advisory

PraisonAI is a multi-agent teams system. Prior to 4.5.128, the AgentOS deployment platform exposes a GET /api/agents endpoint that returns agent names, roles, and the first 100 characters of agent system instructions to any unauthenticated caller. The AgentOS FastAPI application has no authentication middleware, no API key validation, and defaults to CORS allow_origins=["*"] with host="0.0.0.0", making every deployment network-accessible and queryable from any origin by default. This vulnerability is fixed in 4.5.128.

AnalysisAI

PraisonAI AgentOS prior to version 4.5.128 exposes agent metadata including names, roles, and system instruction snippets via an unauthenticated GET /api/agents endpoint accessible from any network origin due to missing authentication middleware and permissive CORS defaults. This information disclosure vulnerability allows remote attackers to enumerate agent configurations without credentials, potentially revealing sensitive operational details that could inform social engineering or reconnaissance attacks against multi-agent deployments.

Technical ContextAI

PraisonAI is a FastAPI-based multi-agent orchestration platform. The vulnerability stems from inadequate API security posture: the AgentOS application lacks authentication middleware for the /api/agents endpoint, performs no API key validation, and deploys with CORS allow_origins set to the wildcard ["*"] and host bound to 0.0.0.0 (all interfaces). This configuration, combined with no access control checks, allows any unauthenticated HTTP client to retrieve agent configuration metadata. The root cause (CWE-200: Exposure of Sensitive Information to an Unauthorized Actor) reflects a design flaw where sensitive operational metadata is exposed without identity verification or authorization checks. The first 100 characters of system instructions may leak prompt injection vectors, role descriptions, or internal operational context that should remain confidential.

RemediationAI

Vendor-released patch: PraisonAI 4.5.128. Upgrade immediately to version 4.5.128 or later to obtain the fix for the authentication and authorization defects in the AgentOS API. Immediate workarounds prior to patching include: restrict network access to the AgentOS deployment by implementing firewall rules to limit /api/agents endpoint access to trusted internal networks only, configure CORS to restrict allow_origins to known trusted domains instead of ["*"], and deploy API authentication middleware (API keys, OAuth2, or similar) in front of the AgentOS application to enforce access control. Refer to the GitHub security advisory at https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-pm96-6xpr-978x for detailed remediation guidance.