PT-2026-61770 · Praisonai · Praisonai
CVE-2026-57116
·
Published
2026-06-18
·
Updated
2026-07-23
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
praisonai versions 4.2.1 through 4.6.57
Description
The
AgentOS FastAPI deployment surface fails to implement authentication, allowing unauthenticated remote users to invoke agents. This issue persists in versions previously reported as patched. An attacker can enumerate deployed agents, read their roles and instructions, and trigger agent actions including tool execution, private context access, and API integrations. The root cause is that AgentOSConfig and AgentAppConfig default the deployment host to 0.0.0.0 and lack authentication fields, while the AgentOS. register routes() function registers endpoints without any security checks.API Endpoints:
- 'GET /api/agents'
- 'POST /api/chat'
Vulnerable Parameters or Variables:
request.message
Function Names:
agent.chat()AgentOS. register routes()
Recommendations
For praisonai versions 4.2.1 through 4.6.57, add authentication fields to
AgentOSConfig and AgentAppConfig, enable authentication by default, and change the default bind host to 127.0.0.1. Ensure that 'GET /api/agents' and 'POST /api/chat' reject requests without valid authentication. As a temporary mitigation, restrict access to the vulnerable endpoints or avoid binding the application to 0.0.0.0 unless it is behind an authenticating proxy.Fix
Missing Authentication
Information Disclosure
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonai