Unrated severityNVD Advisory· Published Jun 18, 2026
PraisonAI - Information Disclosure via Shared MultiAgentLedger State
CVE-2026-56077
Description
PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents with duplicate IDs. Attackers can exploit the lack of agent ID uniqueness enforcement to share ledger instances and expose system prompts and conversation history between agents.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2- github.com/MervinPraison/PraisonAI/security/advisories/GHSA-766v-q9x3-g744mitrevendor-advisory
- www.vulncheck.com/advisories/praisonai-information-disclosure-via-shared-multiagentledger-statemitrethird-party-advisory
News mentions
1- PraisonAI: Five CVEs Disclosed Together — Path Traversal, CORS Misconfig, and Approval BypassesVypr Intelligence · Jun 18, 2026