PraisonAI Jobs API Unauthenticated Access Vulnerability

Executive Summary

PraisonAI's async Jobs API lacks authentication for the /api/v1/runs endpoint. This allows unauthenticated users to submit jobs, read results, cancel runs, or delete jobs using operator credentials. The issue exists in the FastAPI-based jobs module which has no authentication checks.

Useful 0 Not Useful 0

Detection Guidance

Check if the Jobs API endpoints under /api/v1/runs are accessible without authentication. Use tools like curl to send unauthenticated requests to these endpoints and verify if they return job data or allow job submission. Example: curl -X GET http://<target>/api/v1/runs/jobs. If responses include job details or actions succeed without credentials, the system is likely vulnerable.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to run unauthorized prompts against your LLM credentials, consume system resources, access sensitive job results, or delete existing jobs. This could lead to data breaches, financial loss, or service disruption.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's security rules for protected health information. It may result in non-compliance penalties and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade PraisonAI to version 4.6.58 or later to apply the authentication fix. Ensure the PRAISONAI_JOBS_API_KEY middleware is configured and enforced on all /api/v1/runs routes. Restrict network access to the Jobs API if possible and monitor for unauthorized job submissions or data access.

Useful 0 Not Useful 0