PT-2026-81348 · Praisonai · Praisonai
CVSS v3.1
8.6
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
PraisonAI versions prior to 4.6.58
Description
The Jobs API in PraisonAI lacks authentication middleware, router-level dependencies, and per-route authorization checks. This allows any caller who can reach the jobs server to submit agent jobs using the operator's configured LLM credentials, list all jobs in the shared store, read results of other jobs, cancel running jobs, and delete terminal jobs. The issue occurs because the
create app() function in server.py mounts the jobs router without any authentication mechanism.API Endpoints:
/api/v1/runs(used for submitting and listing jobs)/api/v1/runs/{job id}(used for getting job status and deleting jobs)/api/v1/runs/{job id}/result(used for reading job results)/api/v1/runs/{job id}/cancel(used for cancelling jobs)/api/v1/runs/{job id}/stream(used for streaming job output)
Vulnerable Parameters or Variables:
job id: Used to identify specific jobs for retrieval, cancellation, or deletion.
Function Names:
create app(): Fails to implement authentication when mounting the jobs router.
Recommendations
Update PraisonAI to version 4.6.58 or later.
As a temporary mitigation, restrict access to the
/api/v1/runs endpoint by ensuring the server is bound only to 127.0.0.1 and is not exposed via public interfaces, container publishing, reverse proxies, or tunnels.Exploit
Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Praisonai