CVE-2026-57131
Received Received - Intake

PraisonAI Unauthenticated Job Management Vulnerability

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to 4.6.58, praisonai.jobs.server.create_app mounts praisonai.jobs.router.create_router under /api/v1/runs without authentication or per-job authorization. Network clients can submit attacker-controlled prompts and agent configuration, list and read jobs, stream results, and cancel or delete other jobs, exposing service credentials and connected tool capabilities to unauthorized agent execution. This vulnerability is fixed in 4.6.58.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-57131
EUVD
EUVD-2026-77597

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
praisonai praisonai to 4.6.58 (exc)
praisonai praisonai to 4.6.48|start_including=4.6.59 (exc)
praisonai praisonai 4.6.58

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a critical authentication bypass vulnerability in PraisonAI versions before 4.6.58. The /api/v1/runs endpoint lacks authentication, allowing unauthenticated attackers to submit malicious prompts, access job data, stream results, and manipulate jobs. This exposes service credentials and tool capabilities to unauthorized execution.

Detection Guidance

Check if the PraisonAI service is running and exposed on the network. Use curl to test unauthenticated access to the vulnerable endpoint: curl -X POST http://<target-ip>:<port>/api/v1/runs -H 'Content-Type: application/json' -d '{"prompt":"test"}'. If the request succeeds without authentication, the vulnerability likely exists.

Impact Analysis

Attackers can execute arbitrary agent code, access sensitive data like LLM API keys and tool integrations, list or read other users' jobs, disrupt operations via job deletion or cancellation, and potentially achieve remote code execution in your environment.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and access control. It enables unauthorized access to sensitive data (potentially including personal or health information), lacks proper authentication for data processing, and could lead to data breaches or unauthorized system modifications, violating GDPR and HIPAA security requirements.

Mitigation Strategies

Upgrade PraisonAI to version 4.6.59 or later to patch the vulnerability. If immediate upgrade is not possible, restrict network access to the /api/v1/runs endpoints using firewalls or reverse proxies. Ensure authentication middleware is enforced globally in the FastAPI application.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57131. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart