PraisonAI, a multi-agent teams system, contains a critical vulnerability in its Jobs API where the create_app function mounts the /api/v1/runs endpoint without any authentication. Prior to version 4.6.51, any reachable caller could exploit this to submit jobs, read results, cancel runs, or delete jobs using operator-level credentials. This effectively grants unauthorized users full control over job operations without requiring any credentials. The vulnerability poses significant risk as it allows unauthenticated access to sensitive job management functionality. The fix introduces PRAISONAI_JOBS_API_KEY middleware that enforces authentication via Authorization or X-API-Key headers. The issue has been patched in version 4.6.58 of PraisonAI.
