CVE-2026-61427 Details
Description
PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option defaults to None, and the server only enforces Authorization/Bearer checks when an API key is configured. When an operator runs 'praisonai mcp serve --transport http-stream' without an API key, an unauthenticated client (no Authorization header, and no Origin header, which is also permitted) can initialize a session, enumerate the available tools (tools/list), and invoke tools (tools/call). Additionally, the dispatcher forwards tool-call arguments to handlers without validating them against the advertised inputSchema. The server binds to 127.0.0.1 by default, so remote exploitation requires the operator to bind to a network-accessible address (e.g., --host 0.0.0.0).
A vulnerability exists in PraisonAI versions prior to 4.6.78, where the MCP HTTP-stream transport is exposed without authentication by default. The command-line interface (CLI) option for the API key defaults to None, and the server only enforces Authorization/Bearer checks when an API key is set. As a result, when the 'praisonai mcp serve --transport http-stream' command is executed without an API key, an unauthenticated client can initiate a session, enumerate available tools, and invoke those tools. Furthermore, the dispatcher forwards tool-call arguments to handlers without validating them against the specified input schema. Although the server typically binds to 127.0.0.1, allowing only local access, remote exploitation is possible if the operator binds to a network-accessible address.
Users can update to PraisonAI version 4.6.78 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 15, 2026CISA-ADP
Assessed Jul 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hc5v-gxvj-58wh | CISA-ADP | AdvisoryExploitTechnical AnalysisVendor |
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hc5v-gxvj-58wh | [email protected] | AdvisoryExploitTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/praisonai-before-authentication-bypass-via-http-stream | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| PraisonAI | <= 4.6.77 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 16, 2026 | CVE Modified | CISA-ADP |
| Jul 15, 2026 | New CVE Received | [email protected] |