CVE-2026-57148 Details
Description
PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the public dev-secret-change-me HS256 signing key when PLATFORM_JWT_SECRET is unset, while the startup and token-issuance guards are disabled because PLATFORM_ENV also defaults to dev. An unauthenticated attacker can sign a JWT containing an attacker-chosen sub value, and AuthService._verify_token() accepts it as an authenticated identity, enabling user or workspace-owner impersonation when a target identifier is known. This vulnerability is fixed in praisonai-platform 0.1.6.
A vulnerability in the PraisonAI platform's authentication service prior to version 0.1.6 allows unauthenticated token forging. When the 'PLATFORM_JWT_SECRET' environment variable is not set, the application defaults to a hardcoded public development secret, 'dev-secret-change-me'. This issue is compounded by the fact that the 'PLATFORM_ENV' variable also defaults to 'dev', leaving the application open to exploitation. An attacker can create a JSON Web Token (JWT) with a chosen subject ('sub') value, which is then accepted as a valid identity by the application's token verification process. This vulnerability enables impersonation of users or workspace owners, provided the target's identifier is known.
Users can upgrade to PraisonAI platform version 0.1.6 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 15, 2026CISA-ADP
Assessed Sep 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f38v-77qj-h4jq | CISA-ADP | AdvisoryBundleRemedyVendor |
| https://github.com/MervinPraison/PraisonAI/commit/e0fb8e7dd1ee6759c18ed07f436c21dbd9c20747 | [email protected] | Source CodeVendor |
| https://github.com/MervinPraison/PraisonAI/pull/1793 | [email protected] | Issue TrackingVendor |
| https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.51 | [email protected] | Vendor |
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f38v-77qj-h4jq | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1188 | Initialization of a Resource with an Insecure Default | [email protected] |
| CWE-287 | Improper Authentication | [email protected] |
| CWE-798 | Use of Hard-coded Credentials | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MervinPraison PraisonAI | <= 0.1.4 (semver) |
CPE
Remediation
| |
| MervinPraison PraisonAI Platform | <= 0.1.4 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 16, 2026 | CVE Modified | CISA-ADP |
| Sep 15, 2026 | New CVE Received | [email protected] |