PT-2026-61782 · Unknown · Praisonai Agent Server
CVE-2026-57128
·
Published
2026-06-18
·
Updated
2026-07-23
CVSS v3.1
4.3
Medium
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
PraisonAI Agent Server (affected versions not specified)
Description
The Server-Sent Events (SSE) server contains a flaw where the
/publish and /info endpoints do not validate authentication tokens, despite the ServerConfig dataclass defining an auth token field. An attacker with network access to the SSE server port can inject arbitrary messages into the SSE stream, which are then broadcast to all connected clients. Additionally, the /info endpoint allows the leakage of server configuration and the current count of connected clients. This issue is particularly critical in containerized or cloud environments where the server host is configured to 0.0.0.0 for external access.Recommendations
Validate the
auth token in the /publish, /events, and /info request handlers to ensure only authorized requests are processed.
Maintain the default server binding to 127.0.0.1 and provide warnings when it is overridden to 0.0.0.0.
Configure and use the auth token option in production environments.Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Praisonai Agent Server