CVE-2026-55534
Received Received - Intake

Authentication Bypass in PraisonAI Agents API

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. From praisonai 4.6.34 until 4.6.58, praisonai serve agents accepts --api-key but _create_agents_app() does not authenticate POST /agents or POST /agents/{agent_name}. A network caller can invoke configured agents without credentials even when an API key was supplied. This issue is fixed in version 4.6.58.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-55534
EUVD
EUVD-2026-65500

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
praisonai praisonai to 4.6.58 (inc)
praisonai praisonai From 4.6.34 (inc) to 4.6.48 (inc)
praisonai praisonai 4.6.58

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in PraisonAI allows unauthenticated remote execution of agents even when an API key is configured. The issue occurs because the API key is accepted during server startup but not enforced on agent invocation endpoints like POST /agents or POST /agents/{agent_name}. Attackers can bypass authentication and execute agents without credentials.

Detection Guidance

Check if unauthenticated requests to POST /agents or POST /agents/{agent_name} return successful responses without requiring an API key. Monitor network traffic for unauthorized agent invocations. Verify if the server is bound to 0.0.0.0 and if API keys are enforced on these endpoints.

Impact Analysis

This vulnerability enables unauthorized users to execute agents remotely, potentially leading to unauthorized LLM usage, file access, database interactions, and other privileged operations. It allows attackers to perform actions as if they were authenticated users, posing risks to system integrity and confidentiality.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements such as GDPR (data protection) and HIPAA (health information privacy). Unauthorized agent execution may result in data breaches, unauthorized data processing, or exposure of protected information, leading to legal and regulatory penalties.

Mitigation Strategies

Upgrade PraisonAI to version 4.6.58 or later to apply the fix. Ensure API keys are enforced on all agent invocation routes by adding proper authentication middleware. Restrict server binding to trusted networks if possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55534. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart