CVE-2026-61426
PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults
Vexday Risk Score
18Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.8EPSS —KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
11 Jul 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS. Unauthenticated attackers can call GET /api/agents to read agent instructions and system prompts, or POST /api/chat to invoke agents without authentication.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
MervinPraison · PraisonAI