CVE-2026-61435

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.78

Description An authentication bypass exists in the agent invocation endpoints when the PRAISONAI CALL AUTH variable is set to disabled. The system attempts to restrict this disabled authentication mode to localhost bindings by deriving the host from request.url.hostname, which relies on the client-controlled HTTP Host header. A remote, unauthenticated attacker can spoof the 'Host: 127.0.0.1' header to bypass this restriction. This allows the attacker to list agents via the 'GET /api/v1/agents' endpoint and invoke them via the 'POST /api/v1/agents/{agent id}/invoke' endpoint without authentication.

Recommendations Update to version 4.6.78 or later. Avoid configuring PRAISONAI CALL AUTH=disabled if the service is accessible over a network.