HIGH 8.6 GitHub
CVE-2026-61426
PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure
## Summary
The AgentOS server in the `praisonai` TypeScript/npm package ships an insecure default: it binds `0.0.0.0`, sets no API key, and uses CORS `*` with credentials. The API-key middleware is only registered when an API key is configured, so the documented quickstart (`new AgentOS({agents:[...]}).serve({port})`) exposes, **unauthenticated**, `GET /api/agents` (which leaks agent names/roles/instructions, i.e. system prompts) and `POST /api/chat` (which invokes agents). Any network peer can
Affected Products
- npm/praisonai < 1.7.3
References
- https://github.com/advisories/GHSA-6wjp-v33h-5cvq
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6wjp-v33h-5cvq
- https://nvd.nist.gov/vuln/detail/CVE-2026-61426
- https://www.vulncheck.com/advisories/praisonai-before-unauthenticated-agent-access-via-ins
This high severity vulnerability with a CVSS score of 8.6 was published on 2026-10-08 via GitHub. Affected: npm/praisonai < 1.7.3.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.