CyberRota Analysis
AI-GeneratedPraisonAI versions 1.6.0 to 1.7.2 are vulnerable due to the absence of authentication middleware for critical API endpoints, allowing unauthenticated remote attackers to access sensitive information such as agent names and roles, and potentially invoke agents to manipulate workflows and access external resources. The impact is severe, as attackers can exploit this vulnerability to gain unauthorized control over the system and its data. Organizations using affected versions should prioritize remediation by upgrading to version 1.7.2 or later to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and registers GET /api/agents and POST /api/chat without authentication middleware. A remote caller who can reach the service can obtain agent names, roles, and instruction prefixes and can invoke a selected agent, potentially reaching its tools, memory, external APIs, credentials, and workflow state. An initial remediation was released in version 1.7.2.