PT-2026-61772 · Pypi · Praisonaiagents
CVE-2026-57118
·
Published
2026-06-18
·
Updated
2026-07-23
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
praisonaiagents versions 4.6.33 through 4.6.57
Description
The HTTP server implemented via
AgentTeam.launch() and Agents.launch() starts agent invocation endpoints that are externally reachable without authentication. The server registers the following endpoints:GET /{path}/list: lists deployed agents.POST /{path}: sequentially invokes all agents in the team.POST /{path}/{agent id}: invokes a specific agent.
These routes directly call the
agent.chat() function without verifying any Authorization headers or API keys. By default, the server binds to 0.0.0.0, allowing remote network clients to enumerate agents, trigger model API costs, and execute actions through connected tools, internal APIs, or private knowledge sources.Recommendations
For versions 4.6.33 through 4.6.57, implement a shared authentication helper that requires an
Authorization: Bearer <token> or a valid API-key header for the GET /{path}/list, POST /{path}, and POST /{path}/{agent id} endpoints.
Change the default host binding of AgentTeam.launch() to 127.0.0.1 to prevent external exposure by default.
As a temporary mitigation, restrict the server to bind only to the local loopback address or use network firewalls to limit access to the server port.Fix
Missing Authentication
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonaiagents