CVE-2026-61435: PraisonAI Authentication Bypass via Spoofed Host Header
Summary
CVE-2026-61435: PraisonAI: Call API localhost-only authentication bypass via spoofed Host header. Affects praisonai versions < 4.6.78. Fixed in 4.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an open-source automation tool that allows users to create and manage agents for various tasks. It provides a flexible API for invoking these agents, enabling seamless integration into workflows. However, a vulnerability has been identified in its API authentication mechanism, specifically when the authentication is disabled, allowing unauthorized access to agent functionalities.
Vulnerability Detail
The vulnerability arises from a flaw in the authentication check for the PraisonAI API, where the system incorrectly trusts the Host header from incoming requests. When the environment variable PRAISONAI_CALL_AUTH is set to 'disabled', the API is intended to restrict access to localhost only. However, an attacker can spoof the Host header to '127.0.0.1', bypassing the intended security measures. This allows unauthorized users to list and invoke agents, potentially leading to unauthorized actions and data exposure. The vulnerability is present in the agent invocation routes of the API, specifically in the verify_token function, which fails to validate the origin of the request properly.
How To Fix
Latest published version: 4.7.16 as of 22 Oct 2026
pip install --upgrade "praisonai==4.7.16"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonai==4.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the PRAISONAI_CALL_AUTH=disabled setting in production environments. Ensure that authentication is always enabled to prevent unauthorized access. If you must use this setting for local development, restrict network access to the API to trusted hosts only.
Conclusion
The CVE-2026-61435 vulnerability in PraisonAI poses a significant risk due to its potential for unauthorized access via spoofed Host headers. It is crucial for users to update to the latest version of the package and implement proper authentication measures to safeguard their applications.
See every vulnerability recorded for praisonai →
FAQ
CVE-2026-61435 is a vulnerability in the PraisonAI package that allows unauthorized access to its API by spoofing the Host header when authentication is disabled.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to unauthorized access to agent functionalities, allowing attackers to invoke agents and potentially access sensitive data or perform malicious actions.
You can update the PraisonAI package to the patched version by running the command 'pip install --upgrade praisonai'.
The CVSS score of this vulnerability is 8.2, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for praisonai.
