HighVulnerability
GHSA-7ww9-85pg-cv4x: PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution
- Identifiers
- CVE-2026-55534GHSA-7ww9-85pg-cv4x
- Published
- Record updated
- Affected
- PraisonAI >= 4.6.34, < 4.6.58
- Fixed in
- 4.6.58
- released June 13, 2026, 73 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
PraisonAI's `praisonai serve agents` command accepts `--api-key`, but the key is never enforced on the `POST /agents` and `POST /agents/{agent_name}` compatibility routes. Any network-reachable caller can invoke agents without credentials, even when the server is started with `--api-key` and bound to `0.0.0.0`. The advisory confirms v4.6.48 and v4.6.34 as vulnerable and gives a likely affected range of `>= 4.6.34, <= 4.6.48`.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-122235: Jan workspace guard bypass allows file writes outside workspace via symlinksSimilar attack · NVD/CVE Database
- HighCVE-2026-122135: Mistral Vibe remote code execution via repository gpg.program settingSimilar attack · NVD/CVE Database
- HighCVE-2026-122134: Mistral Vibe remote code execution through malicious Git filter driversSimilar attack · NVD/CVE Database
- HighCVE-2026-122133: Mistral Vibe untrusted search path code execution via git.exe on WindowsSimilar attack · NVD/CVE Database
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database