PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, create_auth_middleware() allows requests when auth=api-key lacks PRAISONAI_API_KEY or JWT authentication lacks PRAISONAI_JWT_SECRET. An externally bound Recipe server can therefore accept unauthenticated POST /v1/recipes/run requests despite authentication being enabled. This issue is fixed in version 4.6.58.

A critical authentication bypass vulnerability was discovered in PraisonAI, a multi-agent teams system, prior to version 4.6.58. The vulnerability exists in the create_auth_middleware() function, which fails to properly enforce authentication when the PRAISONAI_API_KEY or PRAISONAI_JWT_SECRET environment variables are not configured. As a result, an externally bound Recipe server can accept unauthenticated POST requests to /v1/recipes/run endpoints even when authentication is supposed to be enabled. This effectively renders the authentication mechanism non-functional under certain configuration conditions. The flaw could allow unauthorized users to execute recipes on exposed servers. The issue has been patched in PraisonAI version 4.6.58. Users are advised to upgrade immediately to mitigate the risk of unauthenticated access.