CVE-2026-57134
Received Received - Intake

Authentication Bypass in PraisonAI via Missing Credential Validation

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer. Basic and OAuth policies accept any non-empty Authorization header without calling auth.validate(), then return an authenticated result, allowing callers with invalid credentials to access MCP tools and resources protected by those policies. This issue is fixed in version 1.7.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-57134
EUVD
EUVD-2026-78419

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
praisonai praisonai From 1.5.1 (inc) to 1.7.2 (inc)
mervinpraison praisonai 1.5.1
mervinpraison praisonai 1.7.1
mervinpraison praisonai 1.7.2
mervinpraison praisonai 4.6.60

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-288 The product requires authentication, but the product has an alternate path or channel that does not require authentication.
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects PraisonAI versions 1.5.1 to 1.7.1. It allows invalid Basic or OAuth credentials to bypass authentication checks. The MCPSecurity helper only validates credentials for api-key and bearer methods, skipping validation for Basic and OAuth. This means any non-empty Authorization header for Basic or OAuth is accepted without proper validation, granting access even with invalid credentials.

Detection Guidance

To detect CVE-2026-57134, check if your PraisonAI instance is running versions 1.5.1 through 1.7.1. Inspect the MCPSecurity.evaluatePolicy() function in src/praisonai-ts/src/mcp/security.ts to verify if Basic or OAuth authentication methods bypass credential validation. Test endpoints protected by these policies by sending requests with invalid Basic or OAuth Authorization headers to see if access is granted.

Impact Analysis

This vulnerability could allow unauthenticated users to interact with protected MCP tools or resources. Attackers could exploit it to access sensitive data or perform unauthorized actions. The high CVSS score of 8.2 indicates significant risk due to potential unauthorized access.

Mitigation Strategies

Upgrade PraisonAI to version 1.7.2 or later to patch the vulnerability. Ensure all authentication policies now validate credentials for Basic and OAuth methods. Review and update MCP server configurations to enforce mandatory credential validation across all authentication types.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57134. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart