CVE-2026-47410 Details
Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal `"dev-secret-change-me"` when `PLATFORM_JWT_SECRET` is unset. A safety check exists but only fires when `PLATFORM_ENV != "dev"`; the default value of `PLATFORM_ENV` is `"dev"`, so the check is silently bypassed in any deployment that does not explicitly opt out. The attacker reads the literal from this public source file, mints a JWT with arbitrary `sub` and `email` claims, and authenticates as any existing user (including workspace owners and admins). PraisonAI Platform version 0.1.4 patches the issue.
A vulnerability exists in the PraisonAI Platform, specifically in versions prior to 0.1.4, due to an insecure default cryptographic key for JSON Web Token (JWT) signing. When the 'PLATFORM_JWT_SECRET' environment variable is not set, the secret defaults to a hardcoded value of 'dev-secret-change-me'. Although a safety check is intended to ensure the secret is properly set, it only activates when 'PLATFORM_ENV' is not 'dev', allowing the default secret to be used in most deployments. This vulnerability enables an attacker to read the default secret from the public source code, create a JWT with arbitrary claims, and authenticate as any user, including those with administrative privileges. The issue has been patched in PraisonAI Platform version 0.1.4.
Users can update to PraisonAI Platform version 0.1.4 or later, and ensure that the 'PLATFORM_JWT_SECRET' is set to a strong, random value in production environments.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 21, 2026CISA-ADP
Assessed Jul 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-3qg8-5g3r-79v5 | CISA-ADP | AdvisoryRemedyVendor |
| https://github.com/MervinPraison/PraisonAI/commit/ef79b7a0561796ad9807f0f09538c25cc78d3619 | [email protected] | Source CodeVendor |
| https://github.com/MervinPraison/PraisonAI/pull/1685 | [email protected] | Issue TrackingVendor |
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-3qg8-5g3r-79v5 | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-321 | Use of Hard-coded Cryptographic Key | [email protected] |
| CWE-798 | Use of Hard-coded Credentials | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MervinPraison PraisonAI Platform | <= 0.1.2 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Modified | CISA-ADP |
| Jul 21, 2026 | CVE Modified | [email protected] |
| Jul 21, 2026 | New CVE Received | [email protected] |