CVE-2026-57134 PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation
Attackers can bypass authentication in PraisonAI MCP security by using Basic or OAuth headers, gaining unauthorized access to protected tools and resources.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-57134?
CVE-2026-57134 is a high-severity authentication bypass vulnerability in MervinPraison PraisonAI, published on 15 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer. Basic and OAuth policies accept any non-empty Authorization header without calling auth.validate(), then return an authenticated result, allowing callers with invalid credentials to access MCP tools and resources protected by those policies. This issue is fixed in version 1.7.2.
Which versions are affected by CVE-2026-57134?
2 open source packages ship an affected version, including praisonai.
| Package | Affected | Fixed in |
|---|---|---|
praisonai npm | From 1.5.1 | 1.7.2 |
praisonai npm | From 1.5.1 | 1.7.2 |
How do I fix CVE-2026-57134?
Upgrade praisonai to 1.7.2 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-57134 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-57134 exists.
Sources
Also known as GHSA-4qq2-2j2x-x62c.