PT-2026-45052 · Praisonai · Praisonai
CVE-2026-47393
·
Published
2026-05-11
·
Updated
2026-07-21
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PraisonAI version 4.6.33
Description
The code-generator
praisonai.deploy.api.generate api server code creates a Flask API server with authentication disabled by default. When users deploy the server using the command praisonai deploy --type api, the resulting server binds to 0.0.0.0 and exposes the /chat and /agents endpoints without requiring authentication. This allows unauthenticated users to provide JSON input that triggers the praisonai.run() function, leading to arbitrary LLM orchestration using the API keys present in the process environment. This can result in unauthorized tool use, such as python repl, bash, file I/O, and HTTP calls, billed to the operator.Recommendations
For version 4.6.33, enable authentication by configuring the
APIConfig class with auth enabled=True and providing a valid auth token.Exploit
Fix
Exposure of Resource to Wrong Sphere
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonai