CVE-2026-61426: PraisonAI Package Exposes AgentOS to Unauthenticated Access
Summary
CVE-2026-61426: The AgentOS server in the praisonai TypeScript/npm package ships an insecure default: it binds 0.0.0.0, sets no API key, and uses CORS * with credentials. Affects praisonai versions < 1.7.3. Fixed in 1.7.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The PraisonAI package is a TypeScript/npm library designed for building and deploying AI agents. It provides a framework for creating intelligent agents that can interact with users and perform tasks based on predefined instructions. However, the package has a significant security flaw in its AgentOS server configuration, which defaults to an insecure state, allowing unauthorized access to sensitive functionalities.
Vulnerability Detail
The vulnerability in PraisonAI arises from the AgentOS server binding to '0.0.0.0' with no API key and using permissive CORS settings. This configuration allows any network peer to access the endpoints '/api/agents' and '/api/chat' without authentication. As a result, attackers can retrieve sensitive agent instructions and invoke agents, leading to potential misuse and information disclosure. The root cause lies in the default settings that do not enforce authentication unless explicitly configured by the developer.
How To Fix
Latest published version: 1.7.4 as of 23 Oct 2026
npm install praisonai@1.7.4Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.7.3
This is the first release that contains the fix.
npm install praisonai@1.7.3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, developers can manually set the API key in the configuration to prevent unauthorized access. Modify the configuration as follows: 'apiKey: process.env.PRAISONAI_AGENTOS_API_KEY || "your-secure-api-key"'. This ensures that the authentication middleware is registered and protects the endpoints.
Conclusion
The PraisonAI package has a critical vulnerability that exposes its AgentOS server to unauthenticated access, allowing unauthorized users to retrieve sensitive information and invoke agents. It is crucial for developers to update to the latest version and implement security best practices to mitigate these risks.
See every vulnerability recorded for praisonai →
FAQ
The CVSS score of this vulnerability is 8.6, indicating a high severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include unauthorized access to agent instructions, potential misuse of agent functionalities, and exposure of sensitive information.
Yes, a patch is available in version 1.7.3 of the PraisonAI package. It is recommended to update to this version.
If immediate updates are not possible, implement the suggested workaround by setting an API key in the configuration to secure the endpoints.
Related vulnerabilities
Recent vulnerabilities recorded for praisonai.
