CVE-2026-60091: PraisonAI Jobs API Unauthenticated Access and SSRF Vulnerability
Summary
CVE-2026-60091: PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF. Affects praisonai versions < 4.6.78. Fixed in 4.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an open-source framework designed for managing asynchronous jobs in AI applications. It provides a Jobs API that allows users to submit tasks and receive results via webhooks. However, a critical security flaw exists in its default configuration, where the Jobs API is unauthenticated unless a specific environment variable is set, exposing it to potential exploitation.
Vulnerability Detail
The vulnerability arises from the Jobs API's lack of authentication by default, allowing unauthenticated users to submit jobs with attacker-controlled webhook URLs. The API accepts a POST request to '/api/v1/runs' without any authentication checks, leading to a Server-Side Request Forgery (SSRF) risk. The webhook URL validation occurs at the time of the request, but the actual connection resolves the hostname again, making it susceptible to DNS rebinding attacks. This flaw can lead to unauthorized access to internal services and potential data exfiltration.
How To Fix
Latest published version: 4.7.16 as of 22 Oct 2026
pip install --upgrade "praisonai==4.7.16"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonai==4.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can manually set the 'PRAISONAI_JOBS_API_KEY' environment variable to enforce authentication. This can be done by adding the following line to your environment configuration: 'export PRAISONAI_JOBS_API_KEY=your_secure_api_key'.
Conclusion
The PraisonAI Jobs API vulnerability (CVE-2026-60091) poses significant risks due to its unauthenticated access and SSRF potential. It is crucial for users to update to the patched version and implement the recommended security measures to protect their applications.
See every vulnerability recorded for praisonai →
FAQ
The CVSS score of this vulnerability is 7.2, indicating a high severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The potential impacts include unauthorized job submissions, abuse of resources, and SSRF attacks that could lead to data breaches.
Yes, you can mitigate the risk by setting the 'PRAISONAI_JOBS_API_KEY' environment variable to enforce authentication temporarily.
For further questions, consider reaching out to the PraisonAI community or checking their official documentation for more information.
Related vulnerabilities
Recent vulnerabilities recorded for praisonai.
