CVE-2026-57122: PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)

Published Sep 14, 2026
·
Updated

PraisonAI is a multi-agent teams system. Prior to 4.6.59, the WhatsApp and Linear bot webhook handlers verify HMAC signatures only when WHATSAPPAPPSECRET or LINEARWEBHOOKSECRET is configured and otherwise parse and dispatch unsigned request bodies. A remote unauthenticated client that reaches the webhook route can forge messages, comments, or agent-session events, impersonate platform users, influence agent prompts and actions, and disrupt bot processing. This issue is fixed in 4.6.59.

Affected Software

1 affected component
PraisonAI<4.6.59

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade PraisonAI to a version that resolves this vulnerability.

    Fixed in 4.6.59

Event History

Sep 14, 2026
CVE Published
via MITRE·03:02 PM
Data Sourced
via MITRE·03:02 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

Which deployments are exposed to forged webhook requests?

Deployments using the WhatsApp or Linear bot webhook handlers are exposed when the corresponding WHATSAPP_APP_SECRET or LINEAR_WEBHOOK_SECRET is unset and the webhook route is reachable by a remote client.

2

Does exploitation require credentials or user interaction?

No. A remote unauthenticated client can exploit the issue by sending requests to a reachable affected webhook route; no credentials or user interaction are required.

3

What can an attacker do with a forged webhook?

An attacker can forge messages, comments, or agent-session events, impersonate platform users, influence agent prompts and actions, and disrupt bot processing.

4

What should be done if an immediate upgrade is not possible?

Configure WHATSAPP_APP_SECRET and LINEAR_WEBHOOK_SECRET for the webhook handlers in use so that HMAC signature verification is performed. Restricting remote access to the webhook routes also reduces exposure.

5

How can I determine whether my instance is affected?

Instances prior to 4.6.59 are affected if they use the WhatsApp or Linear webhook handlers and the applicable webhook secret environment variable is unset. Version 4.6.59 contains the fix.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203