CVE-2026-47410 praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset
Attackers can forge JWT tokens using a hardcoded default secret to impersonate any user, including admins, in PraisonAI Platform deployments.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-47410?
CVE-2026-47410 is a critical vulnerability in MervinPraison praisonai-platform, published on 21 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal `"dev-secret-change-me"` when `PLATFORM_JWT_SECRET` is unset. A safety check exists but only fires when `PLATFORM_ENV != "dev"`; the default value of `PLATFORM_ENV` is `"dev"`, so the check is silently bypassed in any deployment that does not explicitly opt out. The attacker reads the literal from this public source file, mints a JWT with arbitrary `sub` and `email` claims, and authenticates as any existing user (including workspace owners and admins). PraisonAI Platform version 0.1.4 patches the issue.
Which versions are affected by CVE-2026-47410?
3 open source packages ship an affected version, including praisonai-platform.
| Package | Affected | Fixed in |
|---|---|---|
praisonai-platform PyPI | All versions | 0.1.4 |
praisonai-platform PyPI | All versions | 0.1.4 |
praisonai-platform PyPI | All versions | 0.1.4 |
How do I fix CVE-2026-47410?
Upgrade praisonai-platform to 0.1.4 or later.
Is CVE-2026-47410 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-47410 exists.
Sources
Also known as GHSA-3qg8-5g3r-79v5, PYSEC-2026-479.