{"uuid": "64b93853-04a4-4f5c-9567-0ded043fa426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvme7cocsb2w", "content": "CVE-2026-57140 - praisonai\nVersions 1.6.0 through 1.7.1 of PraisionAI's AgentOS expose two web endpoints that anyone who can reach the server can call without proving who they are. Through these\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #npm #CVE #infosec", "creation_timestamp": "2026-09-16T05:00:08.763452Z"}