CVE ID :CVE-2026-57116 Published : Oct. 23, 2026, 1:17 p.m. | 58 minutes ago Description :PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in releases after the...

#Sicherheitslücke #Update

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-57116 - PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation

VERWANDTEARTIKEL

PHP shares mitigation for new RCE vulnerability with no patch

Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands

CVE-2026-58497 - Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests

CVE-2026-55486 - Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS

CVE-2026-53942 - Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN

CVE-2026-54668 - Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config)