---
id: CVE-2026-57127
title: PraisonAI is a multi-agent teams system
summary: >-
  PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve
  installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator selects
  api-key or JWT authentication, but each middleware forwards requests when
  PRAISONAI_API_KE…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-306
  - CWE-1188
vendor: MervinPraison
product: PraisonAI
affected:
  - PraisonAI < 4.6.48
patched:
  - praisonai 4.6.59
published: '2026-09-14'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T13:42:48.053'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-57127'
references:
  - url: >-
      https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1
    label: security-advisories@github.com
  - url: 'https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58'
    label: security-advisories@github.com
  - url: >-
      https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4hj-7hfh-g2f4
    label: security-advisories@github.com
  - url: >-
      https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4hj-7hfh-g2f4
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://github.com/MervinPraison/PraisonAI'
tags:
  - nvd
  - cve.org
  - exploit-available
  - osv
  - pip
epss: 0.009
epssPercentile: 0.58031
aliases:
  - GHSA-j4hj-7hfh-g2f4
ecosystem: pip
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-09-14T16:46:54.383926Z'
ingestedAt: '2026-07-21T19:04:57.231Z'
---

## Overview

PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator selects api-key or JWT authentication, but each middleware forwards requests when PRAISONAI_API_KEY or PRAISONAI_JWT_SECRET and the corresponding recipe value are absent. Unauthenticated clients can then reach recipe execution, input, and output surfaces and may trigger connected tools despite the operator explicitly enabling authentication. This issue is fixed in 4.6.58.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-57127)

Affected packages:

- `praisonai < 4.6.59`

Patched in:

- `praisonai 4.6.59`

Source: https://osv.dev/vulnerability/GHSA-j4hj-7hfh-g2f4