{"cve":"CVE-2026-57135","nvd":{"published":"2026-09-15T11:17:10.733","modified":"2026-09-15T14:45:28.563","status":"Deferred","description":"PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-ts/src/cli/features/sandbox-executor.ts uses buildEnv() only to inject invalid http_proxy and https_proxy environment variables and does not establish an operating-system network boundary. Programs that ignore those proxy variables can open sockets directly, allowing supposedly isolated commands to reach localhost, internal services, cloud metadata, or external hosts and potentially exfiltrate data. An initial remediation was released in version 1.7.2.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","score":7.6},"cwes":["CWE-653","CWE-693"],"references":["https://github.com/MervinPraison/PraisonAI/commit/709a0387853709a5e2f2c34680fa64cada252c27","https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.60","https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rrpf","https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rrpf"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:53:43.293028046+00:00"},"epss":{"cve":"CVE-2026-57135","score":0.00416,"percentile":0.35918,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-gqmf-56h7-rrpf","url":"https://osv.dev/vulnerability/GHSA-gqmf-56h7-rrpf","summary":"npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients","modified":"2026-07-20T21:56:44.618716Z","packages":[{"ecosystem":"npm","name":"praisonai","purl":"pkg:npm/praisonai","ranges":[">=1.2.3 <1.7.2"],"fixed":["1.7.2"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}