HIGH 7.3 GitHub
CVE-2026-61428
PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing
## Summary
PraisonAI's AgentMail bot, when run in webhook (or hybrid) mode, starts an aiohttp webhook server bound to `0.0.0.0` and processes inbound `message.received` events **without verifying any signature/HMAC and without authentication**. The sender address and message body are taken directly from the attacker-controlled request body, so any network peer can inject messages into the agent with a spoofed sender (bypassing sender allow/block lists) and have the agent process the content and
Affected Products
- pip/praisonai <= 4.6.77
References
- https://github.com/advisories/GHSA-qj9c-59p6-8cgx
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qj9c-59p6-8cgx
- https://nvd.nist.gov/vuln/detail/CVE-2026-61428
- https://www.vulncheck.com/advisories/praisonai-agentmail-before-message-injection-via-webh
This high severity vulnerability with a CVSS score of 7.3 was published on 2026-10-07 via GitHub. Affected: pip/praisonai <= 4.6.77.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.