Technical impact
The vulnerability is a fail‑open in the authentication middleware of PraisonAI. When the application is set to use API‑key or JWT authentication but the required secret variables PRAISONAI_API_KEY or PRAISONAI_JWT_SECRET are missing, the middleware accepts all requests. An attacker who can reach the externally bound Recipe server can therefore trigger the /v1/recipes/run endpoint without providing any credentials, resulting in a bypass of access controls for that resource.
Affected Systems
The flaw applies to PraisonAI releases before version 4.6.58, including 4.6.57 and older, produced by MervinPraison. The issue is limited to the Recipe server component that processes POST requests for recipe execution.
Risk and Exploitability
The CVSS base score of 8.2 indicates high severity, and the vulnerability is exploitable over the network from any external host that can reach the Recipe server’s API. Because the exploit requires no additional credentials and can be performed by simply sending a crafted HTTP request, the risk is that an attacker could execute arbitrary recipes or other privileged operations. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, but the high CVSS and the documented remote availability make it a significant threat, especially for deployments that expose the Recipe endpoint to the internet.
Github GHSA