CVE-2026-61428
PraisonAI AgentMail before 4.6.78 Message Injection via Webhook
- State
- Published
- Severity
- 6.9 Medium
- Published
- Jul 11, 2026
- Updated
- Jul 13, 2026
- Reserved
- Jul 9, 2026
Description
PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with spoofed sender addresses. Attackers can POST crafted message.received events to the webhook endpoint to inject arbitrary content into the agent and trigger replies to attacker-controlled addresses, bypassing sender allow/block lists.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.3 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | VulnCheck |
Weaknesses
- CWE-290 Authentication Bypass by Spoofing
Affected Products
| Product | Versions |
|---|---|
PraisonAIMervinPraison |
|
References
- GitHub Security Advisory (GHSA-qj9c-59p6-8cgx)vendor-advisory
- VulnCheck Advisory: PraisonAI AgentMail before 4.6.78 Message Injection via Webhookthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.