PT-2026-61782 · Unknown · Praisonai Agent Server

CVE-2026-57128

·

Published

2026-06-18

·

Updated

2026-07-23

CVSS v3.1

4.3

Medium

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions PraisonAI Agent Server (affected versions not specified)
Description The Server-Sent Events (SSE) server contains a flaw where the /publish and /info endpoints do not validate authentication tokens, despite the ServerConfig dataclass defining an auth token field. An attacker with network access to the SSE server port can inject arbitrary messages into the SSE stream, which are then broadcast to all connected clients. Additionally, the /info endpoint allows the leakage of server configuration and the current count of connected clients. This issue is particularly critical in containerized or cloud environments where the server host is configured to 0.0.0.0 for external access.
Recommendations Validate the auth token in the /publish, /events, and /info request handlers to ensure only authorized requests are processed. Maintain the default server binding to 127.0.0.1 and provide warnings when it is overridden to 0.0.0.0. Configure and use the auth token option in production environments.

Fix

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-57128
GHSA-35W5-PCW4-JX94
PYSEC-2026-3528

Affected Products

Praisonai Agent Server