CVE-2026-57132: PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication
PraisonAI is a multi-agent teams system. Prior to 4.6.62, setting PRAISONAICALLAUTH to disabled makes verifytoken accept requests to /api/v1/agents/{id}/invoke without CALLSERVERTOKEN authentication. Deployments that use the application's advertised opt-out can expose registered agents and their connected tools or private context to unauthenticated invocation. The vulnerability is fixed in 4.6.62.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PraisonAIto a version that resolves this vulnerability.Fixed in 4.6.62 - Configuration
Do not set PRAISONAI_CALL_AUTH=disabled; it unconditionally disables authentication and, in versions prior to 4.6.62, allows unauthenticated requests to /api/v1/agents/{id}/invoke that bypass CALL_SERVER_TOKEN authentication via verify_token.
PraisonAI PRAISONAI_CALL_AUTH = disabled
Event History
Frequently Asked Questions
Which deployments are exposed to unauthenticated agent invocation?
PraisonAI deployments running a version before 4.6.62 are exposed if PRAISONAI_CALL_AUTH is set to disabled. This advertised authentication opt-out causes requests to the agent invocation endpoint to be accepted without a CALL_SERVER_TOKEN.
What does an attacker need to exploit this issue?
An attacker does not need authentication, privileges, or user interaction when the affected environment variable setting is in use. They need network access to the /api/v1/agents/{id}/invoke endpoint and an agent ID to invoke a registered agent.
What is the impact of successful exploitation?
Unauthenticated callers can invoke registered agents. Depending on the deployed agents, this can expose connected tools or private context.
How can I determine whether my deployment is affected?
Check whether the PraisonAI version is earlier than 4.6.62 and whether PRAISONAI_CALL_AUTH is set to disabled. Deployments meeting both conditions should be treated as affected.
What should be done if an immediate upgrade is not possible?
Do not set PRAISONAI_CALL_AUTH to disabled, and ensure CALL_SERVER_TOKEN authentication remains required for the invocation endpoint. Upgrade to version 4.6.62 when possible.