CyberRota Analysis
AI-GeneratedPraisonAI versions prior to 1.7.3 are vulnerable due to an insecure default configuration that allows unauthenticated access to critical API endpoints, enabling attackers to read sensitive agent instructions and invoke agents without authentication. This poses a significant risk as it could lead to unauthorized data exposure and manipulation of system behavior. Organizations using affected versions should prioritize remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS. Unauthenticated attackers can call GET /api/agents to read agent instructions and system prompts, or POST /api/chat to invoke agents without authentication.