Vulnerability Description
PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-ts/src/cli/features/sandbox-executor.ts uses buildEnv() only to inject invalid http_proxy and https_proxy environment variables and does not establish an operating-system network boundary. Programs that ignore those proxy variables can open sockets directly, allowing supposedly isolated commands to reach localhost, internal services, cloud metadata, or external hosts and potentially exfiltrate data. An initial remediation was released in version 1.7.2.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/MervinPraison/PraisonAI/commit/709a0387853709a5e2f2c34680fa64
- https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.60
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rr
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rr
FAQ
What is CVE-2026-57135?
CVE-2026-57135 is a vulnerability with a CVSS score of 7.6 (HIGH). PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-ts/src/cli/features/sandbox-executor.ts uses buildEnv() only to inject invalid h...
How severe is CVE-2026-57135?
CVE-2026-57135 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-57135?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.