CVE-2026-57127

praisonai: recipe serve auth middleware silently disables itself when no secret is set

State: Published
Severity: 9.8 Critical
Published: Sep 14, 2026
Updated: Sep 14, 2026
Reserved: Jun 24, 2026

Description

PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator selects api-key or JWT authentication, but each middleware forwards requests when PRAISONAI_API_KEY or PRAISONAI_JWT_SECRET and the corresponding recipe value are absent. Unauthenticated clients can then reach recipe execution, input, and output surfaces and may trigger connected tools despite the operator explicitly enabling authentication. This issue is fixed in 4.6.58.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	GitHub_M

Weaknesses

CWE-306 Missing Authentication for Critical Function
CWE-1188 Insecure Default Initialization of Resource

Affected Products

Product	Versions
PraisonAIMervinPraison	< 4.6.48Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.