CVE-2026-56836 PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-56836?
CVE-2026-56836 is a high-severity vulnerability in MervinPraison PraisonAI, published on 23 Oct 2026.
Official description
PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe command is registered in the Typer app and praisonai recipe serve dispatches to the deprecated Typer command in src/praisonai/praisonai/cli/commands/recipe.py. That Typer command can start the Recipe HTTP server on a non-localhost interface with no authentication. It prints a deprecation warning, and then launches the server. Because config.auth is absent, create_app() does not attach the API-key or JWT middleware. Unauthenticated requests can then reach the recipe API and, when enabled, /admin/reload. This issue has been patched in version 4.6.59.
Which versions are affected by CVE-2026-56836?
3 open source packages ship an affected version, including praisonai.
| Package | Affected | Fixed in |
|---|---|---|
praisonai PyPI | From 4.5.112 | 4.6.59 |
praisonai PyPI | From 4.5.112 | 4.6.59 |
praisonai PyPI | From 4.5.112 | 4.6.59 |
How do I fix CVE-2026-56836?
Upgrade praisonai to 4.6.59 or later.
Is CVE-2026-56836 being exploited?
There is no known exploitation of CVE-2026-56836 in the wild and no public exploit code.
Sources
Also known as GHSA-5qw8-f2g9-ff29, PYSEC-2026-3502.