https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:35:53 +0000 https://vulnerability.circl.lu/vuln/cve-2026-55528 <p><strong>Affected:</strong> MervinPraison PraisonAI, MervinPraison praisonaiagents</p> <p>PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token but AgentServer._create_app does not check it on any route. A remote caller can subscribe, publish, and perform other actions without a valid bearer token or X-Auth-Token even when authentication is configured. This issue is fixed in version 1.6.58.</p> <p><strong>Affected:</strong> MervinPraison PraisonAI, MervinPraison praisonaiagents</p> <p>PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token but AgentServer._create_app does not check it on any route. A remote caller can subscribe, publish, and perform other actions without a valid bearer token or X-Auth-Token even when authentication is configured. This issue is fixed in version 1.6.58.</p> https://vulnerability.circl.lu/vuln/cve-2026-55528 https://vulnerability.circl.lu/vuln/pysec-2026-3899 <p><strong>Affected:</strong> PyPI: praisonaiagents</p> <p>**Researcher:** Kai Aizen — SnailSploit (@SnailSploit), Adversarial &amp; Offensive Security Research **Target:** https://github.com/MervinPraison/PraisonAI</p> <p>---</p> <p>**Package:** `praisonaiagents` on PyPI **Affected version (empirically tested):** 1.6.48 **Component:** `praisonaiagents.server.AgentServer` (the bundled HTTP / SSE server)</p> <p>---</p> <p>## TL;DR</p> <p>`AgentServer.ServerConfig` advertises an `auth_token: Optional[str] = None` field that operators set when they want to lock down the server. The `GET /info` endpoint even displays it back as `&#34;auth_token&#34;: &#34;***&#34;` — strongly implying the value is wired into request authentication.</p> <p>It isn&#39;t. `AgentServer._create_app` never reads `auth_token`, never adds an authentication middleware, and never decorates any route with a dependency that checks it. Every route — `/info`, `/publish`, `/events`, `/health` — accepts unauthenticated requests regardless of whether `auth_token` is configured.</p> <p>The same package contains a *sibling* server, `praisonaiagents.ui.a2a.A2A`, written by the same developer, which implements the bearer-token pattern correctly via FastAPI&#39;s `Depends(_verify_auth)`. This rules out the &#34;auth is not yet implemented; operators are expected to add it&#34; reading: the developer knew the pattern but did not apply it to `AgentServer`.</p> <p>## Root cause</p> <p>``` Expected behavior when setting ServerConfig(auth_token=&#34;…&#34;): &#34;Only requests with a matching Authorization header will be accepted on /publish, /events, /info.&#34;</p> <p>Ac…</p> <p><strong>Affected:</strong> PyPI: praisonaiagents</p> <p>**Researcher:** Kai Aizen — SnailSploit (@SnailSploit), Adversarial &amp; Offensive Security Research **Target:** https://github.com/MervinPraison/PraisonAI</p> <p>---</p> <p>**Package:** `praisonaiagents` on PyPI **Affected version (empirically tested):** 1.6.48 **Component:** `praisonaiagents.server.AgentServer` (the bundled HTTP / SSE server)</p> <p>---</p> <p>## TL;DR</p> <p>`AgentServer.ServerConfig` advertises an `auth_token: Optional[str] = None` field that operators set when they want to lock down the server. The `GET /info` endpoint even displays it back as `&#34;auth_token&#34;: &#34;***&#34;` — strongly implying the value is wired into request authentication.</p> <p>It isn&#39;t. `AgentServer._create_app` never reads `auth_token`, never adds an authentication middleware, and never decorates any route with a dependency that checks it. Every route — `/info`, `/publish`, `/events`, `/health` — accepts unauthenticated requests regardless of whether `auth_token` is configured.</p> <p>The same package contains a *sibling* server, `praisonaiagents.ui.a2a.A2A`, written by the same developer, which implements the bearer-token pattern correctly via FastAPI&#39;s `Depends(_verify_auth)`. This rules out the &#34;auth is not yet implemented; operators are expected to add it&#34; reading: the developer knew the pattern but did not apply it to `AgentServer`.</p> <p>## Root cause</p> <p>``` Expected behavior when setting ServerConfig(auth_token=&#34;…&#34;): &#34;Only requests with a matching Authorization header will be accepted on /publish, /events, /info.&#34;</p> <p>Ac…</p> https://vulnerability.circl.lu/vuln/pysec-2026-3899