Vulnerability · Published Jul 11, 2026 · Assigned by VulnCheck
CVE-2026-61426PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults
High 8.6
In plain English
A high-severity information exposure in PraisonAI from MervinPraison. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.6High
Exploit odds (30 days)0.4%top 65.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS. Unauthenticated attackers can call GET /api/agents to read agent instructions and system prompts, or POST /api/chat to invoke agents without authentication.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | praisonai | 1.7.3 | GHSA-6wjp-v33h-5cvq |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| MervinPraison | PraisonAI | 0 – before 1.7.3 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
References
- GitHub Security Advisory (GHSA-6wjp-v33h-5cvq) vendor-advisory
- VulnCheck Advisory: PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults third-party-advisory