Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-40313

PraisonAI is a multi-agent teams system. In versions 4.5.139 and below, the GitHub Actions workflows are vulnerable to ArtiPACKED attack, a known credential leakage vector caused by using actions/checkout without setting persist-credentials: false. By default, actions/checkout writes the GITHUB_TOKEN (and sometimes ACTIONS_RUNTIME_TOKEN) into the .git/config file for persistence, and if any subsequent workflow step uploads artifacts (build outputs, logs, test results, etc.), these tokens can be
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:22c0a7970387555b78cd86174f601ed9bdff3f2e91f49e02e514681ebb914d76
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"PraisonAI","vendor":"MervinPraison","versions":[{"status":"affected","version":"< 4.5.140"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:89aff7b07500893311cf23f81e2f06b56ebb3c51a86a9f6177d40b23cee504a5 · sha256:95f88fa4d753e09d… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:89aff7b07500893311cf23f81e2f06b56ebb3c51a86a9f6177d40b23cee504a5 · sha256:95f88fa4d753e09d… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-829","description":"CWE-829: Inclusion of Functionality from Untrusted Control Sphere","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:89aff7b07500893311cf23f81e2f06b56ebb3c51a86a9f6177d40b23cee504a5 · sha256:95f88fa4d753e09d… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"name":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-3959-6v5q-45q2","tags":["x_refsource_CONFIRM"],"url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-3959-6v5q-45q2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:89aff7b07500893311cf23f81e2f06b56ebb3c51a86a9f6177d40b23cee504a5 · sha256:95f88fa4d753e09d… · /containers/cna/references/0
{"name":"https://thehackernews.com/2024/08/github-vulnerability-artipacked-exposes.html","tags":["x_refsource_MISC"],"url":"https://thehackernews.com/2024/08/github-vulnerability-artipacked-exposes.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:89aff7b07500893311cf23f81e2f06b56ebb3c51a86a9f6177d40b23cee504a5 · sha256:95f88fa4d753e09d… · /containers/cna/references/1
{"name":"https://unit42.paloaltonetworks.com/github-repo-artifacts-leak-tokens","tags":["x_refsource_MISC"],"url":"https://unit42.paloaltonetworks.com/github-repo-artifacts-leak-tokens"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:89aff7b07500893311cf23f81e2f06b56ebb3c51a86a9f6177d40b23cee504a5 · sha256:95f88fa4d753e09d… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer