Loading vulnerability…
PraisonAI AgentServer Authentication Bypass
CVE-2026-55528 is an authentication-enforcement flaw in PraisonAI's praisonaiagents AgentServer before version 1.6.58. Although ServerConfig exposes an authentication token setting, AgentServer._create_app does not validate that token for its routes. Consequently, authentication remains ineffective even when configured, and remote callers can invoke AgentServer functionality without a valid bearer token or X-Auth-Token. PraisonAI releases before 4.6.58 are also reported as affected.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
An unauthenticated network attacker can access AgentServer functionality, including obtaining server information, subscribing to and monitoring event streams, and publishing attacker-controlled events. This may disclose agent prompts or tool-related data, trigger unauthorized event-handler activity across connected agents, compromise event integrity, and flood event queues to cause denial of service. Reported CVSS v3.1 characteristics are AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N.
If you can’t patch tonight, do this now.
Until patched, prevent untrusted network access to AgentServer. Place the service behind a reverse proxy or API gateway that enforces authentication, and restrict reachability with firewall rules, private networking, or VPN access. If implementing compensating application controls, require and validate bearer-token authentication on sensitive routes, use constant-time token comparisons, and leave health checking unauthenticated only where operationally necessary.
Patch, then assume compromise.
Upgrade praisonaiagents to version 1.6.58 or later. Where applicable, upgrade PraisonAI to version 4.6.58 or later. Verify that authentication is enforced consistently on all AgentServer routes that expose configuration, event publication, or event subscription capabilities.
No public exploits tracked yet. Mallory keeps watching.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.