CVE-2026-56074: PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching
PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent executecommand calls to bypass approval prompts. Attackers can exploit this by obtaining initial approval for a benign command, then silently exfiltrate API keys and credentials via subsequent shell commands without user consent.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PraisonAIto a version that resolves this vulnerability.Fixed in 1.5.128 - Configuration
Change the tool-approval caching so decisions are keyed by the full invocation (tool name plus invocation arguments) or disable tool-approval caching so execute_command prompts require approval per invocation.
PraisonAI tool_approval_cache_behavior = cache by full invocation (tool name + arguments) or disable caching - Operational
Rotate any API keys, credentials, and other secrets that may have been exposed and audit recent execute_command approvals and command history for unauthorized activity.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56074?
The severity of CVE-2026-56074 is rated medium with a CVSS score of 5.5.
How does CVE-2026-56074 affect PraisonAI users?
CVE-2026-56074 allows attackers to bypass approval prompts by exploiting coarse-grained caching of tool approval decisions.
What is the risk associated with CVE-2026-56074?
The risk associated with CVE-2026-56074 is categorized as 31, indicating a significant security concern.
How do I fix CVE-2026-56074?
To fix CVE-2026-56074, upgrade to PraisonAI version 1.5.128 or later.
What exploit could result from CVE-2026-56074?
Exploitation of CVE-2026-56074 could allow attackers to silently exfiltrate API keys and credentials.