PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token but AgentServer._create_app does not check it on any route. A remote caller can subscribe, publish, and perform other actions without a valid bearer token or X-Auth-Token even when authentication is configured. This issue is fixed in version 1.6.58.

CVE-2026-55528 affects PraisonAI, a multi-agent teams system, in versions prior to praisonaiagents 1.6.58. The vulnerability exists because AgentServer exposes ServerConfig.auth_token but the _create_app method fails to enforce authentication checks on any route. This allows remote unauthenticated callers to subscribe, publish, and perform other sensitive actions without providing a valid bearer token or X-Auth-Token header, even when authentication is explicitly configured. The flaw represents a complete authentication bypass in the AgentServer component. The issue has been resolved in praisonaiagents version 1.6.58. Users are strongly advised to upgrade immediately to mitigate the risk of unauthorized access to their multi-agent systems.