PT-2026-61786 · Praisonai · Praisonai

CVE-2026-57132 · Published 2026-06-18 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions PraisonAI (affected versions not specified)

Description Setting the PRAISONAI CALL AUTH variable to disabled completely bypasses all authentication for the /api/v1/agents/{id}/invoke endpoint. This occurs because the verify token() function returns immediately without performing any checks when this configuration is active. This bypass is suggested within the application's own error messages, increasing the likelihood of it being used in production Docker and Compose configurations. Consequently, any agent registered on the server can be triggered without credentials, potentially allowing the execution of arbitrary actions based on the tools configured for the agent.

Recommendations Avoid setting the PRAISONAI CALL AUTH variable to disabled in production environments. Ensure that authentication is enabled by configuring a valid CALL SERVER TOKEN. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-57132

GHSA-8CCJ-P46R-JWQQ

PYSEC-2026-3508

Affected Products

Praisonai

References · 7

• https://osv.dev/vulnerability/GHSA-8ccj-p46r-jwqq · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-3508 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-57132 · Security Note
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8ccj-p46r-jwqq · Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://github.com/advisories/GHSA-8ccj-p46r-jwqq · Note
• https://pypi.org/project/praisonai · Note