PraisonAI Host Header Spoofing Flaw Lets Attackers Bypass Call API Authentication
Vulnerability Disclosure · 2 sources · Updated 4mo ago · First seen Jul 15, 2026
PraisonAI versions before 4.6.78 are affected by CVE-2026-61435, an authentication bypass in the Call API agent invocation functionality. The flaw appears when PRAISONAI_CALL_AUTH=disabled is configured: the application tries to restrict unauthenticated access to localhost, but determines the request origin from the client-controlled HTTP Host header via request.url.hostname, allowing an attacker to spoof 127.0.0.1 and appear local.
A remote unauthenticated attacker who can reach the service can exploit the issue to access agent-related endpoints without logging in, including GET /api/v1/agents to enumerate registered agents and POST /api/v1/agents/{agent_id}/invoke to invoke them. The vulnerable logic is reported in src/praisonai/praisonai/api/agent_invoke.py; the issue is classified as CWE-287 and carries a CVSS v3.1 score vector of AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N, indicating low-complexity network exploitation with high integrity impact.
