PT-2026-61800 · Pypi · Praisonai
CVE-2026-57146
·
Published
2026-06-18
·
Updated
2026-07-23
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
praisonai versions 4.5.115 through 4.6.58
Description
The A2U Agent-to-User event stream server fails to implement secure-by-default authentication when started via the documented CLI entrypoint. Although a previous fix was claimed, the current CLI wrapper does not install the necessary API-key middleware or generate a token, leaving the server unauthenticated unless the
A2U AUTH TOKEN environment variable is manually set. This allows an attacker to subscribe to agent event streams, potentially exposing agent responses, tool calls, thinking/progress events, and stream metadata. The issue is particularly critical when the server is bound to an external interface using --host 0.0.0.0.API Endpoints:
'/a2u/info'
'/a2u/subscribe'
'/a2u/events/{stream name}'
'/a2u/events/sub/{id}'
'/a2u/health'
Vulnerable Parameters or Variables:
A2U AUTH TOKENFunction Names:
create a2u routes()
authenticate request()Recommendations
For versions 4.5.115 through 4.6.58, set the
A2U AUTH TOKEN environment variable before starting the server to enable authentication.
As a temporary mitigation, avoid using the --host 0.0.0.0 flag to prevent external access to the unauthenticated A2U server.Fix
Missing Authentication
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonai