PT-2026-53130 · Pypi · Praisonai

Published

2026-06-18

·

Updated

2026-06-18

CVSS v3.1

8.2

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Summary

Setting PRAISONAI CALL AUTH=disabled completely disables all authentication on the /api/v1/agents/{id}/invoke endpoint. This bypass is advertised in the application's own error messages, making it likely to appear in production Docker and Compose configurations.

Details

python
# src/praisonai/praisonai/api/agent invoke.py:32
 CALL AUTH DISABLED = os.getenv('PRAISONAI CALL AUTH', '').lower() == 'disabled'

async def verify token(...) -> None:
  if CALL AUTH DISABLED:
    return # all authentication skipped unconditionally
The application's own error message advertises the bypass:
"Set CALL SERVER TOKEN or PRAISONAI CALL AUTH=disabled to run without authentication."
This causes the setting to appear in Docker/Compose configurations as a convenience option.

Proof of Concept

python
import os
os.environ["PRAISONAI CALL AUTH"] = "disabled"
# verify token() now returns immediately for any request
# POST /api/v1/agents/any-agent/invoke → 200 OK (no token needed)
Common vulnerable deployment:
yaml
# docker-compose.yml
environment:
 - PRAISONAI CALL AUTH=disabled # auth completely disabled

Impact

Full unauthenticated access to the agent invocation API. Any agent registered on the server can be triggered without credentials, potentially executing arbitrary actions depending on the agent's configured tools.

Fix

Improper Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-287

Related Identifiers

GHSA-8CCJ-P46R-JWQQ

Affected Products

Praisonai