CVE-2026-57127 praisonai: recipe serve auth middleware silently disables itself when no secret is set
Unauthenticated attackers can bypass authentication and execute recipes in PraisonAI when API keys or JWT secrets are not configured.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-57127?
CVE-2026-57127 is a critical authentication bypass vulnerability in MervinPraison PraisonAI, published on 14 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator selects api-key or JWT authentication, but each middleware forwards requests when PRAISONAI_API_KEY or PRAISONAI_JWT_SECRET and the corresponding recipe value are absent. Unauthenticated clients can then reach recipe execution, input, and output surfaces and may trigger connected tools despite the operator explicitly enabling authentication. This issue is fixed in 4.6.58.
Which versions are affected by CVE-2026-57127?
3 open source packages ship an affected version, including praisonai.
| Package | Affected | Fixed in |
|---|---|---|
praisonai PyPI | All versions | 4.6.59 |
praisonai PyPI | All versions | 4.6.59 |
praisonai PyPI | All versions | 4.6.59 |
How do I fix CVE-2026-57127?
Upgrade praisonai to 4.6.59 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-57127 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-57127 exists.
Sources
Also known as GHSA-j4hj-7hfh-g2f4, PYSEC-2026-3513.