CVE-2026-61427

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.78

Description The MCP HTTP-stream transport is exposed without authentication by default because the CLI --api-key option defaults to None, and the server only enforces Authorization/Bearer checks when an API key is configured. An unauthenticated client can initialize a session, enumerate available tools via the tools/list endpoint, and invoke tools via the tools/call endpoint. Furthermore, the dispatcher forwards tool-call arguments to handlers without validating them against the inputSchema. While the server binds to 127.0.0.1 by default, remote exploitation is possible if the operator binds the server to a network-accessible address using the --host parameter.

Recommendations Update PraisonAI to version 4.6.78 or later. As a temporary mitigation, ensure the server is not bound to a network-accessible address like 0.0.0.0 and always configure a valid API key using the --api-key option.