HIGH 8.2 GitHub
CVE-2026-61435
PraisonAI: Call API localhost-only authentication bypass via spoofed Host header
# Call API localhost-only authentication bypass via spoofed Host header
## Summary
PraisonAI's patched `PRAISONAI_CALL_AUTH=disabled` safeguard for the n8n/call agent invocation API can be bypassed with a spoofed `Host: 127.0.0.1` header, allowing an unauthenticated network caller to list and invoke registered agents when the service is reachable and the opt-out is enabled.
## Technical Details
The affected code is `src/praisonai/praisonai/api/agent_invoke.py`. `verify_token()` is used as a
Affected Products
- pip/praisonai <= 4.6.77
References
- https://github.com/advisories/GHSA-2gpf-2492-q9jh
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2gpf-2492-q9jh
- https://nvd.nist.gov/vuln/detail/CVE-2026-61435
- https://nvd.nist.gov/vuln/detail/CVE-2026-62174
This high severity vulnerability with a CVSS score of 8.2 was published on 2026-10-08 via GitHub. Affected: pip/praisonai <= 4.6.77.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.