CVE-2026-40115
published 2026-04-09CVE-2026-40115: PraisonAI is a multi-agent teams system. Prior to 4.5.128, the WSGI-based recipe registry server (server.py) reads the entire HTTP request body into memory…
PriorityP344high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.33%
25.2th percentile
PraisonAI is a multi-agent teams system. Prior to 4.5.128, the WSGI-based recipe registry server (server.py) reads the entire HTTP request body into memory based on the client-supplied Content-Length header with no upper bound. Combined with authentication being disabled by default (no token configured), any local process can send arbitrarily large POST requests to exhaust server memory and cause a denial of service. The Starlette-based server (serve.py) has RequestSizeLimitMiddleware with a 10MB limit, but the WSGI server lacks any equivalent protection. This vulnerability is fixed in 4.5.128.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mervinpraison | praisonai | < 4.5.128 | 4.5.128 |
| mervinpraison | praisonai | >= 0 < 4.5.128 | 4.5.128 |
| praison | praisonai | < 4.5.128 | 4.5.128 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoS
ghsa·2026-04-10
CVE-2026-40115 [MEDIUM] CWE-770 PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoS
PraisonAI has Unrestricted Upload Size in WSGI Recipe Registry Server that Enables Memory Exhaustion DoS
## Summary
The WSGI-based recipe registry server (`server.py`) reads the entire HTTP request body into memory based on the client-supplied `Content-Length` header with no upper bound. Combined with authentication being disabled by default (no token configured), any local process can send arbitrarily large POST requests to exhaust server memory and cause a denial of service. The Starlette-based server (`serve.py`) has `RequestSizeLimitMiddleware` with a 10MB limit, but the WSGI server lacks any equivalent protection.
## Details
The vulnerable code path in `src/praisonai/praisonai/recipe/server.py`:
**1. No size limit on body read (line 551-555):**
```python
content_length = int(envi
VulDB
MervinPraison PraisonAI up to 4.5.127 Recipe Registry server.py allocation of resources (GHSA-2xgv-5cv2-47vv)
vuldb·2026-04-10·CVSS 6.2
CVE-2026-40115 [MEDIUM] MervinPraison PraisonAI up to 4.5.127 Recipe Registry server.py allocation of resources (GHSA-2xgv-5cv2-47vv)
A vulnerability classified as problematic was found in MervinPraison PraisonAI up to 4.5.127. Impacted is an unknown function of the file server.py of the component Recipe Registry Handler. The manipulation results in allocation of resources.
This vulnerability is known as CVE-2026-40115. Attacking locally is a requirement. No exploit is available.
Upgrading the affected component is advised.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-04-09
Published