CVE-2026-55541
Received Received - Intake

Unauthenticated API Access in PraisonAI

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve unified parse --api-key but _create_agents_app() and _create_unified_app() do not install a credential check. Unauthenticated callers can reach POST /agents and POST /api/v1/agents/{id}/invoke. This issue is fixed in version 4.6.58.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-55541
EUVD
EUVD-2026-65517

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
praisonai praisonai 4.6.58
mervinpraison praisonai 4.6.58
mervinpraison praisonai to 4.6.50 (exc)
mervinpraison praisonai From 4.6.34 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-55541 is a vulnerability in PraisonAI versions 4.6.50 and earlier. The --api-key flag in the praisonai serve command is intended to enforce authentication but is not properly implemented. The server accepts requests without requiring authentication even when an API key is set, allowing unauthorized users to execute agent workflows and access endpoints.

Detection Guidance

Check if PraisonAI versions 4.6.50 or earlier are running without API key enforcement. Inspect server logs for unauthenticated POST requests to /agents or /api/v1/agents/{id}/invoke endpoints. Use curl to test endpoints: curl -X POST http://<server>:<port>/agents. If responses are received without requiring an API key, the system is vulnerable.

Impact Analysis

This vulnerability allows unauthenticated users to reach POST /agents and POST /api/v1/agents/{id}/invoke endpoints. Attackers could misuse this to execute agent workflows, consume API quotas, or run malicious workflows without authorization.

Compliance Impact

This vulnerability allows unauthenticated access to agent workflows and endpoints, which could lead to unauthorized data exposure or manipulation. For GDPR, this may violate principles of data protection and user consent. For HIPAA, it risks unauthorized access to protected health information. Compliance frameworks typically require strict access controls, which this flaw undermines.

Mitigation Strategies

Upgrade PraisonAI to version 4.6.58 or later. Ensure the --api-key flag is properly configured and enforced. If binding to a non-loopback address, verify API key enforcement is active. Restart the server with the updated version to apply fixes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55541. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart