Server-Sent Events Misconfiguration in PraisonAI Agents

Executive Summary

CVE-2026-57128 is a vulnerability in PraisonAI Agents versions 1.6.48 and below. It allows unauthenticated event injection via the Server-Sent Events (SSE) /publish endpoint. The SSE server in src/praisonai-agents/praisonaiagents/server/server.py broadcasts arbitrary messages to all connected clients without checking authentication. The ServerConfig.auth_token field exists but is not validated in the /publish, /events, or /info handlers.

Useful 0 Not Useful 0

Detection Guidance

Check if the PraisonAI Agents server is running on a network-accessible port (default 8765) by using commands like 'netstat -tuln | grep 8765' or 'ss -tuln | grep 8765'. Verify if the server is bound to 0.0.0.0 instead of 127.0.0.1. Test unauthenticated access to endpoints like /publish, /events, or /info using curl commands such as 'curl http://<server-ip>:8765/publish' or 'curl http://<server-ip>:8765/info'.

If these endpoints respond without requiring an auth token, the vulnerability may be present. Ensure the server version is below 1.6.58 by checking 'pip show praisonaiagents' or examining the installed package version.

Useful 0 Not Useful 0

Impact Analysis

An attacker with access to the SSE server port (default 8765) can inject malicious events into the SSE stream. This may cause connected clients to process harmful data or display misleading content. They can also leak server configuration and client-count information via the /info endpoint. Deployments binding to 0.0.0.0 instead of 127.0.0.1 are exploitable from the network without authentication.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized access to server configuration and client data. The lack of authentication in the SSE server endpoints may lead to unauthorized data exposure, which could violate data protection requirements under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade PraisonAI Agents to version 1.6.58 or later immediately using 'pip install --upgrade praisonaiagents'. If upgrading is not possible, restrict network access to the SSE server port (8765) by binding it to 127.0.0.1 only. Configure and enforce the auth_token in ServerConfig to validate requests to /publish, /events, and /info endpoints.

If the server must be exposed to a network, ensure proper authentication is enforced and consider using a firewall to limit access to trusted IPs only.

Useful 0 Not Useful 0