CVE-2026-57118

Name of the Vulnerable Software and Affected Versions praisonaiagents versions 4.6.33 through 4.6.57

Description The HTTP server implemented via AgentTeam.launch() and Agents.launch() starts agent invocation endpoints that are externally reachable without authentication. The server registers the following endpoints:

These routes directly call the agent.chat() function without verifying any Authorization headers or API keys. By default, the server binds to 0.0.0.0, allowing remote network clients to enumerate agents, trigger model API costs, and execute actions through connected tools, internal APIs, or private knowledge sources.

Recommendations For versions 4.6.33 through 4.6.57, implement a shared authentication helper that requires an Authorization: Bearer <token> or a valid API-key header for the GET /{path}/list, POST /{path}, and POST /{path}/{agent id} endpoints. Change the default host binding of AgentTeam.launch() to 127.0.0.1 to prevent external exposure by default. As a temporary mitigation, restrict the server to bind only to the local loopback address or use network firewalls to limit access to the server port.