Executive Summary

This vulnerability exists in PraisonAI's AgentOS deployment platform prior to version 4.5.128. The platform exposes a GET /api/agents endpoint that returns sensitive information such as agent names, roles, and the first 100 characters of agent system instructions to any unauthenticated user. The application lacks authentication middleware and API key validation, and it is configured by default to allow cross-origin requests from any origin, making it accessible and queryable from any network.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized disclosure of sensitive information about the agents in the system, including their names, roles, and partial system instructions. Because the endpoint is accessible without authentication and from any origin, attackers or unauthorized users can easily gather this information, potentially aiding further attacks or reconnaissance.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows unauthenticated access to agent names, roles, and partial system instructions via a publicly accessible API endpoint without authentication or API key validation. Such exposure of potentially sensitive information could lead to non-compliance with data protection standards and regulations like GDPR and HIPAA, which require safeguarding personal and sensitive data against unauthorized access.

However, the provided information does not specify whether the exposed data includes personal or protected health information directly covered by these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, upgrade the PraisonAI AgentOS deployment platform to version 4.5.128 or later, where the issue is fixed.

Additionally, consider restricting network access to the AgentOS deployment platform by limiting exposure to trusted networks only.

Implement authentication middleware or API key validation to prevent unauthenticated access to the /api/agents endpoint.

Review and tighten CORS settings to avoid allowing all origins (i.e., avoid allow_origins=["*"]) and configure the host binding to restrict access instead of using 0.0.0.0.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by checking if the AgentOS deployment platform exposes the GET /api/agents endpoint without authentication.

You can attempt to send an unauthenticated HTTP GET request to the /api/agents endpoint on the target system to see if it returns agent information.

For example, using curl from a command line:

• curl -v http://<target-ip>:<port>/api/agents

If the response contains agent names, roles, or partial system instructions without requiring authentication, the system is vulnerable.

Useful 0 Not Useful 0