PT-2026-81348

CVE-2026-55539

Published

2026-08-25

Updated

2026-09-10

Description by

CVSS 3.1

8.6

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58

Description The Jobs API in PraisonAI lacks authentication middleware, router-level dependencies, and per-route authorization checks. This allows any caller who can reach the jobs server to submit agent jobs using the operator's configured LLM credentials, list all jobs in the shared store, read results of other jobs, cancel running jobs, and delete terminal jobs. The issue occurs because the create app() function in server.py mounts the jobs router without any authentication mechanism.

API Endpoints:

/api/v1/runs (used for submitting and listing jobs)
/api/v1/runs/{job id} (used for getting job status and deleting jobs)
/api/v1/runs/{job id}/result (used for reading job results)
/api/v1/runs/{job id}/cancel (used for cancelling jobs)
/api/v1/runs/{job id}/stream (used for streaming job output)

Vulnerable Parameters or Variables:

job id: Used to identify specific jobs for retrieval, cancellation, or deletion.

Function Names:

create app(): Fails to implement authentication when mounting the jobs router.

Recommendations Update PraisonAI to version 4.6.58 or later. As a temporary mitigation, restrict access to the /api/v1/runs endpoint by ensuring the server is bound only to 127.0.0.1 and is not exposed via public interfaces, container publishing, reverse proxies, or tunnels.

Exploitability

Exploit

Fix

Impacts

Researchers

Riodrwn

Vendors

Affected products

Weakness enumeration

CWE-306: Missing Authentication for Critical Function

Related identifiers

CVE-2026-55539