CVE-2026-57130
Deferred Deferred - Pending Action

IMAP Injection in PraisonAI Agents

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/praisonaiagents/tools/email_tools.py interpolates LLM-controlled from_addr, subject, and query values directly into quoted IMAP SEARCH criteria. Embedded quote, backslash, newline, or null characters can escape the intended criterion and alter IMAP operations when search_emails, reply_email, or archive_email is exposed to an agent with configured email credentials, allowing mailbox data access, modification, deletion, or connection disruption. This issue is fixed in praisonaiagents 1.6.59.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-57130
EUVD
EUVD-2026-77534

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
praisonai praisonaiagents to 1.6.59 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-57130 is an IMAP command injection flaw in PraisonAI's email search tool. It allows attackers to inject malicious IMAP commands by manipulating user-controlled parameters like from_addr, subject, and query. These parameters are directly interpolated into IMAP SEARCH commands without proper sanitization, enabling unauthorized access or modification of email data.

Detection Guidance

Check if the praisonaiagents package version is below 1.6.59 by running: pip show praisonaiagents. If installed, verify if email tools are configured with EMAIL_ADDRESS and EMAIL_PASSWORD environment variables set.

Impact Analysis

This vulnerability can lead to unauthorized email data access, modification, or deletion. Attackers could exfiltrate emails from other folders, delete messages, or disrupt email operations. The impact depends on the permissions of the compromised email account.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR (data protection) or HIPAA (health information privacy) by enabling unauthorized access to sensitive email data. Organizations using PraisonAI with email tools may face legal and regulatory penalties due to compromised data integrity and confidentiality.

Mitigation Strategies

Upgrade praisonaiagents to version 1.6.59 or later immediately. If upgrading is not possible, disable email tools in PraisonAI agents or remove email credentials from agent configurations to prevent exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57130. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart