CVE-2026-61427: PraisonAI HTTP-stream Transport Unauthenticated Access Vulnerability
Summary
CVE-2026-61427: PraisonAI's MCP HTTP-stream server authenticates requests only when an API key is configured; the CLI defaults --api-key to None, so praisonai mcp serve --transport http-stream exposes the full MCP surface unauthenticate... Affects praisonai versions < 4.6.78. Fixed in 4.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an open-source tool designed for machine learning and AI workflows, providing a modular architecture for building and deploying AI models. It includes a Management Control Protocol (MCP) that facilitates communication between components. However, a significant vulnerability exists in its HTTP-stream transport, which defaults to unauthenticated access, exposing sensitive tool enumeration and unvalidated tool-call surfaces.
Vulnerability Detail
The vulnerability arises from the MCP HTTP-stream server's lack of authentication when no API key is configured. By default, the CLI sets the '--api-key' option to None, allowing unauthenticated requests to access the MCP surface. Attackers can exploit this by sending requests without an Authorization header, enabling them to initialize sessions, list available tools, and call tool functions without any validation of input parameters. This can lead to unauthorized access and potential misuse of the system, although it does not currently allow for remote code execution or file reading.
How To Fix
Latest published version: 4.7.16 as of 22 Oct 2026
pip install --upgrade "praisonai==4.7.16"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonai==4.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can explicitly set an API key when starting the MCP server by using the '--api-key' option. For example, run the command: 'praisonai mcp serve --transport http-stream --api-key your_api_key'. This will enforce authentication for incoming requests.
Conclusion
The PraisonAI HTTP-stream transport vulnerability (CVE-2026-61427) poses significant risks due to its default unauthenticated access. Users are advised to update to the patched version or implement workarounds to mitigate potential abuses. Regular monitoring and vulnerability management are essential to maintain security.
See every vulnerability recorded for praisonai →
FAQ
The vulnerability has a CVSS score of 7.3, indicating a high severity level.
No, the vulnerability does not allow for remote code execution or file reading in version 4.6.63.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring signup.
The vulnerability allows unauthorized tool enumeration and tool-call surface access, which can lead to LLM-key and cost abuse.
Yes, you can set an API key when starting the MCP server to enforce authentication as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for praisonai.
