CVE-2026-61428 PraisonAI AgentMail before 4.6.78 Message Injection via Webhook
Unauthenticated attackers can inject messages into PraisonAI AgentMail via webhooks due to missing signature verification, bypassing sender controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-61428?
CVE-2026-61428 is a medium-severity missing authorization vulnerability in MervinPraison PraisonAI, published on 11 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with spoofed sender addresses. Attackers can POST crafted message.received events to the webhook endpoint to inject arbitrary content into the agent and trigger replies to attacker-controlled addresses, bypassing sender allow/block lists.
Weakness: CWE-290
Which versions are affected by CVE-2026-61428?
3 open source packages ship an affected version, including praisonai.
| Package | Affected | Fixed in |
|---|---|---|
praisonai PyPI | All versions | 4.6.78 |
praisonai PyPI | All versions | 4.6.78 |
praisonai PyPI | All versions | 4.6.78 |
How do I fix CVE-2026-61428?
Upgrade praisonai to 4.6.78 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-61428 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-61428 exists.
Sources
Also known as GHSA-qj9c-59p6-8cgx, PYSEC-2026-4259.