PT-2026-45055 · Praisonai · Praisonai

CVE-2026-47396

·

Published

2026-05-29

·

Updated

2026-07-21

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PraisonAI (affected versions not specified)
Description The call server exposes a network-facing agent control API without authentication when the CALL SERVER TOKEN environment variable is not configured. This occurs because the verify token() function in the praisonai.api.agent invoke router fails open, disabling authentication entirely if the token is unset. Since the server binds to 0.0.0.0 by default, any reachable client can access sensitive agent-control endpoints. This allows unauthorized users to list registered agents, retrieve agent metadata and instruction text, invoke agents to trigger downstream tools or external integrations, and unregister agents to disrupt availability.
API Endpoints:
  • /agents (GET)
  • /agents/{agent id} (GET)
  • /agents/{agent id}/invoke (POST)
  • /agents/{agent id} (DELETE)
Vulnerable Variables:
  • CALL SERVER TOKEN
Function Names:
  • verify token()
Recommendations
  • Configure the CALL SERVER TOKEN environment variable to enable authentication.
  • As a temporary mitigation, restrict the server binding from 0.0.0.0 to 127.0.0.1 to prevent remote access when authentication is not configured.

Exploit

Fix

Improper Access Control

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284CWE-306

Related Identifiers

CVE-2026-47396
GHSA-86QC-R5V2-V6X6
PYSEC-2026-466

Affected Products

Praisonai