{"id":"EUVD-2026-43176","enisaUuid":"c5f08255-4795-38eb-ba1f-724d5c79eb36","description":"PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS. Unauthenticated attackers can call GET /api/agents to read agent instructions and system prompts, or POST /api/chat to invoke agents without authentication.","datePublished":"Jul 11, 2026, 1:01:01 PM","dateUpdated":"Jul 13, 2026, 3:05:01 PM","baseScore":8.8,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6wjp-v33h-5cvq\nhttps://www.vulncheck.com/advisories/praisonai-before-unauthenticated-agent-access-via-insecure-defaults\n","aliases":"CVE-2026-61426\nGHSA-g3pq-3vvx-36w6\nGHSA-6wjp-v33h-5cvq\n","assigner":"VulnCheck","epss":0.4,"enisaIdProduct":[{"id":"c1a0da23-d06c-34b6-928e-c035cdaffe6a","product":{"name":"PraisonAI","vendor":{"name":"mervinpraison"}},"product_version":"0 \u003c1.7.3"}],"enisaIdVendor":[{"id":"d15b6c5c-7021-3006-8d04-90586cc24228","vendor":{"name":"mervinpraison"}}],"enisaIdVulnerability":[{"id":"0dda43b7-41d8-371a-b8a1-c8834f9a901f","vulnerability":{"id":"CVE-2026-61426","description":"PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS. Unauthenticated attackers can call GET /api/agents to read agent instructions and system prompts, or POST /api/chat to invoke agents without authentication.","datePublished":"Jul 11, 2026, 1:01:01 PM","dateUpdated":"Jul 13, 2026, 3:05:01 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6wjp-v33h-5cvq\nhttps://www.vulncheck.com/advisories/praisonai-before-unauthenticated-agent-access-via-insecure-defaults\n","enisa_id":"EUVD-2026-43176\n","assigner":"VulnCheck","epss":0.4,"dataProcessed":"Nov 7, 2026, 7:19:07 AM","vulnerabilityProduct":[{"id":"c1793bff-8172-3681-a655-e7dba1832b5d","product":{"name":"PraisonAI","vendor":{"name":"mervinpraison"}},"product_version":"0 \u003c1.7.3"}],"vulnerabilityVendor":[{"id":"4a997944-aeb2-33ec-b022-b03a0b05b5be","vendor":{"name":"mervinpraison"}}]}},{"id":"7ac53aa8-f41f-3b01-8b43-00d6ae21bd26","vulnerability":{"id":"GHSA-g3pq-3vvx-36w6","description":"Duplicate Advisory: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure","datePublished":"Jul 11, 2026, 3:30:23 PM","dateUpdated":"Oct 8, 2026, 10:01:22 PM","baseScore":0.0,"references":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6wjp-v33h-5cvq\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-61426\nhttps://www.vulncheck.com/advisories/praisonai-before-unauthenticated-agent-access-via-insecure-defaults\n","enisa_id":"EUVD-2026-43176\n","aliases":"GHSA-g3pq-3vvx-36w6\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"9dd54647-1b61-3826-9f0f-92c581d260e1","vulnerability":{"id":"GHSA-6wjp-v33h-5cvq","description":"PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure","datePublished":"Oct 8, 2026, 10:01:29 PM","dateUpdated":"Oct 8, 2026, 10:01:29 PM","baseScore":0.0,"references":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6wjp-v33h-5cvq\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-61426\nhttps://github.com/MervinPraison/PraisonAI\nhttps://www.vulncheck.com/advisories/praisonai-before-unauthenticated-agent-access-via-insecure-defaults\n","enisa_id":"EUVD-2026-43176\n","aliases":"GHSA-6wjp-v33h-5cvq\nCVE-2026-61426\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}