{"vulnerability": "cve-2026-57123", "sightings": [{"uuid": "8835ff30-d05e-4f32-a147-01173e47b330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57123", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x227-pf99-vffg", "content": "", "creation_timestamp": "2026-07-20T22:36:36.874939Z"}, {"uuid": "a929b049-1a43-4a66-a018-d5ae5b2ba3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57123", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvighxi6ij2t", "content": "CVE-2026-57123 - praisonaiagents\nThe PraisonAI agents component opens its network interface to all computers and does not require a login or verify where requests originate. Because of this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiagents #mervinpraison #CVE #infosec", "creation_timestamp": "2026-09-14T15:30:07.867826Z"}, {"uuid": "2f9cd995-d2ba-4d81-a055-9b7d171f2e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57123", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mviil2byam25", "content": "\ud83d\udea8 CVE-2026-57123 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, ToolsMCPServer.run_sse and launch...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57123\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T16:07:38.449526Z"}, {"uuid": "0fc8f986-0684-40ce-ac2d-e963d2e2565d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57123", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmcjkkqrk25", "content": "CVE-2026-57123 - praisonaiagents\nThe PraisonAI MCP server is exposed to the public internet without authentication or origin validation. This allows anyone to access and use the tools\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiagents #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-09-16T04:30:04.964611Z"}]}