CVE-2026-40115— PraisonAI has an Unrestricted Upload Size in WSGI Recipe Registry Server Enables Memory Exhaustion DoS
Quick assessment
Affected
MervinPraison PraisonAI
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PraisonAI是Mervin Praison个人开发者的一个低代码多智能体协作框架。 PraisonAI 4.5.128之前版本存在安全漏洞，该漏洞源于WSGI服务器读取HTTP请求体时未设置上限且默认禁用身份验证，可能导致本地进程发送任意大的POST请求耗尽服务器内存，造成拒绝服务。
Possible ATT&CK Techniques 2 AI
T1190 · Exploit Public-Facing Application T1498 · Network Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-40115
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PraisonAI has an Unrestricted Upload Size in WSGI Recipe Registry Server Enables Memory Exhaustion DoS
Source: CVE Program / CVE List V5
Vulnerability Description
PraisonAI is a multi-agent teams system. Prior to 4.5.128, the WSGI-based recipe registry server (server.py) reads the entire HTTP request body into memory based on the client-supplied Content-Length header with no upper bound. Combined with authentication being disabled by default (no token configured), any local process can send arbitrarily large POST requests to exhaust server memory and cause a denial of service. The Starlette-based server (serve.py) has RequestSizeLimitMiddleware with a 10MB limit, but the WSGI server lacks any equivalent protection. This vulnerability is fixed in 4.5.128.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5
Vulnerability Title
PraisonAI 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PraisonAI是Mervin Praison个人开发者的一个低代码多智能体协作框架。 PraisonAI 4.5.128之前版本存在安全漏洞，该漏洞源于WSGI服务器读取HTTP请求体时未设置上限且默认禁用身份验证，可能导致本地进程发送任意大的POST请求耗尽服务器内存，造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MervinPraison | PraisonAI | < 4.5.128 | - |
|
II. Public POCs for CVE-2026-40115
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-40115
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-40115 (1)
Same Patch Batch · MervinPraison · 2026-04-09 · 15 CVEs total
| CVE-2026-40088 | 9.7 CRITICAL | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
| CVE-2026-40154 | 9.3 CRITICAL | PraisonAI Affected by Untrusted Remote Template Code Execution |
| CVE-2026-40113 | 8.4 HIGH | PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized C |
| CVE-2026-40149 | 7.9 HIGH | PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safe |
| CVE-2026-40150 | 7.7 HIGH | PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool |
| CVE-2026-40116 | 7.5 HIGH | PraisonAI's Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without |
| CVE-2026-40153 | 7.4 HIGH | PraisonAIAgents Affected by Environment Variable Secret Exfiltration via os.path.expandvar |
| CVE-2026-40114 | 7.2 HIGH | PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API |
| CVE-2026-40148 | 6.5 MEDIUM | PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size Lim |
| CVE-2026-40117 | 6.2 MEDIUM | PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boun |
| CVE-2026-40112 | 5.4 MEDIUM | PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Require |
| CVE-2026-40151 | 5.3 MEDIUM | PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /ap |
| CVE-2026-40152 | 5.3 MEDIUM | PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses W |
| CVE-2026-40111 | PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memor |
IV. Related Vulnerabilities
Same product: PraisonAI
-
CVE-2026-62176
PraisonAI: Code Injection via f-string Interpolation in Depl -
CVE-2026-57147
praisonai-platform: default JWT signing secret 'dev-secret-c -
CVE-2026-57148
praisonai-platform 0.1.4 still boots on the hardcoded JWT se -
CVE-2026-57140
PraisonAI AgentOS exposes unauthenticated agent listing and -
CVE-2026-57139
PraisonAI MCPServer exposes unauthenticated HTTP tools/call
Same vendor: MervinPraison
-
CVE-2026-62176
PraisonAI: Code Injection via f-string Interpolation in Depl -
CVE-2026-62179
PraisonAI: Platform members can delete owner issue dependenc -
CVE-2026-57147
praisonai-platform: default JWT signing secret 'dev-secret-c -
CVE-2026-57148
praisonai-platform 0.1.4 still boots on the hardcoded JWT se -
CVE-2026-57140
PraisonAI AgentOS exposes unauthenticated agent listing and
Same weakness: CWE-770
-
CVE-2026-102554
Denial of Service via Eager Array Allocation During Deserial -
CVE-2026-87110
Ops Manager Uncontrolled Resource Consumption in Monitoring -
CVE-2026-107885
CUPS<=2.4.20资源耗尽漏洞 -
CVE-2026-78399
Security vulnerabilities have been found in IBM Verify Ident -
CVE-2026-107386
amqp091-go: Pre-negotiation frame limit is not enforced to 4
V. Comments for CVE-2026-40115
No comments yet