CVE-2026-61427: PraisonAI before 4.6.78 Authentication Bypass via HTTP-stream
PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option defaults to None, and the server only enforces Authorization/Bearer checks when an API key is configured. When an operator runs 'praisonai mcp serve --transport http-stream' without an API key, an unauthenticated client (no Authorization header, and no Origin header, which is also permitted) can initialize a session, enumerate the available tools (tools/list), and invoke tools (tools/call). Additionally, the dispatcher forwards tool-call arguments to handlers without validating them against the advertised inputSchema. The server binds to 127.0.0.1 by default, so remote exploitation requires the operator to bind to a network-accessible address (e.g., --host 0.0.0.0).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PraisonAIto a version that resolves this vulnerability.Fixed in 4.6.78 - Configuration
Run 'praisonai mcp serve --transport http-stream' with the CLI --api-key configured to a value, so the server enforces Authorization/Bearer checks.
PraisonAI MCP HTTP-stream server (praisonai mcp serve) --api-key (CLI option default None) = set a non-None API key - Configuration
Bind the MCP server to 127.0.0.1 (default) and avoid binding to a network-accessible address like --host 0.0.0.0 to prevent remote unauthenticated exploitation.
PraisonAI MCP HTTP-stream server (praisonai mcp serve) --host = 127.0.0.1 - Compensating control
Ensure access to the MCP serve endpoint is restricted externally (e.g., only reachable from trusted hosts), since remote exploitation requires the operator to bind to a network-accessible address (e.g., --host 0.0.0.0).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61427?
The severity of CVE-2026-61427 is medium, rated at 6.9 according to the CVSS metrics.
How do I fix CVE-2026-61427?
To fix CVE-2026-61427, upgrade to PraisonAI version 4.6.78 or later, which enforces authentication by default.
What type of vulnerability is CVE-2026-61427?
CVE-2026-61427 is an authentication bypass vulnerability that occurs due to improper default configurations in PraisonAI.
What systems are affected by CVE-2026-61427?
CVE-2026-61427 affects all versions of PraisonAI prior to 4.6.78 when using the HTTP-stream transport.
What risk does CVE-2026-61427 pose?
CVE-2026-61427 poses a risk as it allows unauthorized access to the MCP HTTP-stream transport without proper authentication.