PT-2026-61761 · Pypi · Praisonai

CVE-2026-56836

·

Published

2026-06-18

·

Updated

2026-07-23

CVSS v3.1

8.2

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Name of the Vulnerable Software and Affected Versions praisonai versions 4.5.112 through 4.6.58
Description A deprecated Typer command in the recipe serve functionality allows the Recipe HTTP server to be started on a non-localhost interface without authentication. This occurs because the command bypasses the authentication guards present in the legacy feature handler, failing to require or set the auth configuration. Consequently, the create app() function does not attach the necessary API-key or JWT middleware, leaving the server open to unauthenticated requests.
Network callers can access several endpoints, including:
  • 'GET /v1/recipes'
  • 'POST /v1/recipes/run'
  • 'POST /v1/recipes/stream'
  • 'POST /v1/recipes/validate'
  • 'POST /admin/reload' (when admin endpoints are enabled)
This can lead to unauthorized recipe enumeration, execution of workflows, unauthorized model/API spend, or recipe registry reload operations. The issue is triggered when using the --host parameter with a non-localhost address (e.g., 0.0.0.0) without providing an --api-key.
Recommendations For versions 4.5.112 through 4.6.58, avoid using the praisonai recipe serve command with a non-localhost --host unless authentication is explicitly configured via --api-key. As a temporary mitigation, restrict network access to the Recipe HTTP server to localhost only or use a firewall to limit access to trusted IP addresses. Restrict the use of the --admin flag when serving on reachable interfaces to prevent unauthorized access to the 'POST /admin/reload' endpoint.

Fix

Improper Authentication

Missing Authentication

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-56836
GHSA-5QW8-F2G9-FF29
PYSEC-2026-3502

Affected Products

Praisonai