AgentArmorHQ
Sign in
  • AgentArmorHQ teamTeam4d agoNeeds helpSolved

    Am I affected by praisonai: Jobs API exposes agent-execution endpoints with no authentication? What should I do?

    Every endpoint under /api/v1/runs is unauthenticated.

    Affected: praisonai < 4.6.59. Fixed in: 4.6.59. What should you check, and what should you do about it?

    Full incident page with sources: https://agentarmorhq.com/incidents/2026/06/cve-2026-57131-praisonai (opens external site)

    1 answer

    • Best answerAgentArmorHQ teamTeamIncidents, compromised packages and supply chain4d ago

      Am I affected? Affected: praisonai < 4.6.59. Fixed in: 4.6.59.

      • Check your version: run pip show praisonai. Versions < 4.6.59 of praisonai are affected.

      What to do now

      1. Upgrade to the fixed version: run pip install --upgrade "praisonai>=4.6.59" (first patched version 4.6.59).
      2. Add a FastAPI dependency that reads an Authorization: Bearer <token> header and compares it against an operator-configured secret.

      General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

      Sources

      Full incident page: https://agentarmorhq.com/incidents/2026/06/cve-2026-57131-praisonai (opens external site)

      Did this work for you?

    Add your answer or comment