CVE-2026-61435

PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints (src/praisonai/praisonai/api/agent_invoke.py) when PRAISONAI_CALL_AUTH=disabled is configured. The safeguard intended to restrict the disabled-auth opt-out to localhost binding derives the bind host from request.url.hostname, which is taken from the client-controlled HTTP Host header. A remote, unauthenticated attacker who can reach the service over the network can send a spoofed 'Host: 127.0.0.1' header to bypass the localhost-only restriction and list (GET /api/v1/agents) and invoke (POST /api/v1/agents/{agent_id}/invoke) registered agents without authentication.

• CWE-287

• https://github.com/MervinPraison/PraisonAI/commit/2a855c470077c7d2e2479a575f7ef7f548d51c33
• https://github.com/MervinPraison/PraisonAI/commit/846568c7a5d8ce9e71e56e4c213f027c04909753
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2gpf-2492-q9jh
• https://www.vulncheck.com/advisories/praisonai-before-authentication-bypass-via-host-header-spoofing
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2gpf-2492-q9jh

Published

Jul 15, 2026

Last Modified

Jul 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6143A security flaw has been discovered in farion1231 cc-switch …6.3
• CVE-2026-61430PraisonAI before 1.6.78 contains a server-side request forge…8.5
• CVE-2026-61431PraisonAI before 4.6.78 contains a path traversal vulnerabil…6.8
• CVE-2026-61432PraisonAI (praisonaiagents) before 1.6.78 contains a path tr…6.9
• CVE-2026-61433PraisonAI before 4.6.78 fails to safely encode deployment co…8.5
• CVE-2026-61434PraisonAI versions before 4.6.78 contain an allowlist bypass…8.8
• CVE-2026-61436PraisonAI before 4.6.78 fails to verify Svix webhook signatu…8.8
• CVE-2026-61437PraisonAI (pip package praisonaiagents) before 1.6.78 contai…8.5
• CVE-2026-61438PraisonAI before 4.6.78 contains a remote code execution vul…7.3
• CVE-2026-61439PraisonAI versions before 4.6.78 contain a prompt injection …8.7
• CVE-2026-61440PraisonAI Platform before 0.1.9 fails to properly authorize …7.1
• CVE-2026-61441PraisonAI Platform (praisonai-platform) before 0.1.9 imprope…7.1