PT-2026-61761 · Pypi · Praisonai
CVE-2026-56836
·
Published
2026-06-18
·
Updated
2026-07-23
CVSS v3.1
8.2
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
praisonai versions 4.5.112 through 4.6.58
Description
A deprecated Typer command in the
recipe serve functionality allows the Recipe HTTP server to be started on a non-localhost interface without authentication. This occurs because the command bypasses the authentication guards present in the legacy feature handler, failing to require or set the auth configuration. Consequently, the create app() function does not attach the necessary API-key or JWT middleware, leaving the server open to unauthenticated requests.Network callers can access several endpoints, including:
- 'GET /v1/recipes'
- 'POST /v1/recipes/run'
- 'POST /v1/recipes/stream'
- 'POST /v1/recipes/validate'
- 'POST /admin/reload' (when admin endpoints are enabled)
This can lead to unauthorized recipe enumeration, execution of workflows, unauthorized model/API spend, or recipe registry reload operations. The issue is triggered when using the
--host parameter with a non-localhost address (e.g., 0.0.0.0) without providing an --api-key.Recommendations
For versions 4.5.112 through 4.6.58, avoid using the
praisonai recipe serve command with a non-localhost --host unless authentication is explicitly configured via --api-key.
As a temporary mitigation, restrict network access to the Recipe HTTP server to localhost only or use a firewall to limit access to trusted IP addresses.
Restrict the use of the --admin flag when serving on reachable interfaces to prevent unauthorized access to the 'POST /admin/reload' endpoint.Fix
Improper Authentication
Missing Authentication
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonai