Technical impact
PraisonAI’s server component silently ignores provided API keys, allowing POST requests to agent invocation endpoints to execute without authentication. The failure to enforce bearer or X‑API‑Key headers means an attacker can trigger arbitrary agent actions, potentially leading to code execution or privilege escalation on the host. This weakness maps to CWE‑306, where missing or ineffective authentication permits privilege escalation.
Affected Systems
The vulnerability affects PraisonAI distributed by MervinPraison. All releases before version 4.6.58—including 4.6.51 through 4.6.57—are susceptible. The fix is applied in version 4.6.58 and later.
Risk and Exploitability
With a CVSS score of 7.3 the flaw is considered high severity. EPSS data are not available, and the vulnerability is not currently listed in the CISA KEV catalog, but the attack vector is evident: sending unauthenticated POST /agents or POST /agents/{agent_name} requests to the PraisonAI service. If the service is exposed to untrusted networks, an attacker can obtain full agent‑level control, achieving data compromise, system disruption, or potentially further lateral movement.
Github GHSA