by Kastro
Paper/Archive/CVE-2026-57127

CVE-2026-57127

MervinPraison PraisonAI — praisonai: recipe serve auth middleware silently disables itself when no secret is set

EPSS 0.9%public exploitCVSS 9.8
critical.is priorityof 100
51
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.7.597 × 2011.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator selects api-key or JWT authentication, but each middleware forwards requests when PRAISONAI_API_KEY or PRAISONAI_JWT_SECRET and the corresponding recipe value are absent. Unauthenticated clients can then reach recipe execution, input, and output surfaces and may trigger connected tools despite the operator explicitly enabling authentication. This issue is fixed in 4.6.58.

Affected

ProductAffectedFixed inSource
PraisonAI< 4.6.48–CNA

Scores by source

GitHub_M (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitgithub.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4hj-7hfh-g2f4refgithub.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1refgithub.com/MervinPraison/PraisonAI/releases/tag/v4.6.58