CVE-2026-57128: PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the SSE server in src/praisonai-agents/praisonaiagents/server/server.py does not consult ServerConfig.authtoken before handling /publish, /events, or /info requests. A network client that can reach the server can broadcast arbitrary events to connected clients and obtain server configuration and client-count information. This issue is fixed in praisonaiagents 1.6.58.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
praisonaiagentsto a version that resolves this vulnerability.Fixed in 1.6.58
Event History
Frequently Asked Questions
Who can exploit this issue?
Any network client that can reach the PraisonAI SSE server can exploit it. No authentication or user interaction is required on affected versions.
Which endpoints are affected, and what can an attacker do?
The affected SSE server endpoints are /publish, /events, and /info. An attacker can broadcast arbitrary events to connected clients and retrieve server configuration and client-count information.
Are deployments using an authentication token protected?
No. On affected versions, the SSE server does not consult ServerConfig.auth_token before processing requests to the affected endpoints.
What version fixes the issue?
The issue is fixed in praisonaiagents 1.6.58. Versions before 1.6.58 are affected.