HIGH 8.6 GitHub
CVE-2026-61436
PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents
# AgentMail webhook mode accepts forged unsigned message.received events and invokes agents
## Summary
`praisonai` AgentMail webhook mode exposes a public aiohttp webhook endpoint that accepts caller-controlled `message.received` JSON without verifying AgentMail's Svix webhook signatures, then dispatches the forged message into the configured agent session and reply path.
## Technical Details
The affected boundary is webhook authenticity. AgentMail's webhook verification documentation says A
Affected Products
- pip/praisonai <= 4.6.77
References
- https://github.com/advisories/GHSA-7c92-x8vg-4258
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7c92-x8vg-4258
- https://nvd.nist.gov/vuln/detail/CVE-2026-61436
- https://nvd.nist.gov/vuln/detail/CVE-2026-62172
This high severity vulnerability with a CVSS score of 8.6 was published on 2026-10-07 via GitHub. Affected: pip/praisonai <= 4.6.77.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.