Vulnerability · Published Jul 11, 2026 · Assigned by VulnCheck

CVE-2026-61428PraisonAI AgentMail before 4.6.78 Message Injection via Webhook

High 7.3

In plain English

A high-severity authentication bypass by spoofing in PraisonAI from MervinPraison. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.3%top 76.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with spoofed sender addresses. Attackers can POST crafted message.received events to the webhook endpoint to inject arbitrary content into the agent and trigger replies to attacker-controlled addresses, bypassing sender allow/block lists.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	praisonai	4.6.78	GHSA-qj9c-59p6-8cgx
PyPI	praisonai	4.6.78	PYSEC-2026-4259

Affected products (as reported)

Vendor	Product	Versions
MervinPraison	PraisonAI	0 – before 4.6.78

Weakness: CWE-290 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

GitHub Security Advisory (GHSA-qj9c-59p6-8cgx) vendor-advisory
VulnCheck Advisory: PraisonAI AgentMail before 4.6.78 Message Injection via Webhook third-party-advisory