CVE-2026-40151

Affected versions of the PraisonAI package are vulnerable to Information Disclosure due to the GET /api/agents endpoint in the AgentOS deployment platform lacking any authentication middleware or API key validation. The _register_routes() method in agentos.py registers all routes on a plain FastAPI application with no authentication dependencies, and the default CORS configuration uses allow_origins=["*"] with host="0.0.0.0", making every deployment network-accessible and queryable from any origin. An unauthenticated attacker can retrieve agent names, roles, and the first 100 characters of agent system instructions, potentially exposing sensitive operational logic and proprietary prompt configurations.