Critical (AgentArmorHQ estimate)Remote code executionJune 18, 2026

praisonai: Jobs API exposes agent-execution endpoints with no authentication

Product: praisonai
CVE: CVE-2026-57131
Affected: praisonai < 4.6.59
Fixed in: 4.6.59

Last verified against sources: October 26, 2026

Am I affected?

praisonai: affected praisonai < 4.6.59. Fixed in 4.6.59.

Check your version: run pip show praisonai. Versions < 4.6.59 of praisonai are affected. [1]

What to do now

Upgrade to the fixed version: run pip install --upgrade "praisonai>=4.6.59" (first patched version 4.6.59). [1]
Add a FastAPI dependency that reads an Authorization: Bearer <token> header and compares it against an operator-configured secret. [1]

General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

Discuss this incident

What happened

Every endpoint under /api/v1/runs is unauthenticated. [1]
praisonai ships a standalone async-jobs HTTP server whose job is to accept job submissions and run agents on the operator's behalf. [1]
There is no auth_token field, no Depends(verify_*), no middleware that inspects Authorization. [1]

Impact

A network-reachable attacker can execute arbitrary agent code. [1]
The job runs in the operator's process — same environment variables, same filesystem, same credentials. [1]
GET /api/v1/runs lists all jobs; GET /api/v1/runs/{job_id}/result returns the full result of any completed job. [1]
POST /…/cancel and DELETE /…/{job_id} accept arbitrary job IDs without any ownership / authorization check. [1]

What was done

praisonai affected < 4.6.59 patched 4.6.59. [1]
Add a single FastAPI dependency that reads an Authorization: Bearer <token> header and hmac.compare_digests it against an operator-configured secret. [1]

Sources

GHSA-fq2m-6wqh-x44g — GitHub Advisory Database

Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.

Copy a plain-text summary for Slack, GitHub issues, or team security channels.

Brief

[CVE-2026-57131] praisonai: Jobs API exposes agent-execution endpoints with no authentication
Product: praisonai | Affected: praisonai < 4.6.59 | Fixed in: 4.6.59
Summary: Every endpoint under `/api/v1/runs` is unauthenticated.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/06/cve-2026-57131-praisonai

Was this page useful?

Corrections

Report an error or request a correction. We review requests within 5 business days and add a dated correction note.

Discussions for CVE-2026-57131

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

← All incidents Related tools in directory Check package