PraisonAI async Jobs API Authentication Bypass Vulnerability
EARLY WARNING · UNCONFIRMED. This page describes a developing threat that 0Day surfaced from early signals and has not yet independently confirmed. Details may change. Always verify against the primary sources before acting.
- Severity
- HIGH
- Affected component
- praisonai (pypi)
- Affected versions
- >= v4.6.33, <= v4.6.33 or >= v4.6.32, <= v4.6.32 or >= v4.6.31, <= v4.6.31 or >= v4.6.30, <= v4.6.30 or >= v4.6.29, <= v4.6.29 or >= v4.6.28, <= v4.6.28 or >= v4.6.27, <= v4.6.27 or >= v4.6.26, <= v4.6.26 or >= v4.6.25, <= v4.6.25 or >= v4.6.24, <= v4.6.24 or >= v4.6.23, <= v4.6.23 or >= v4.6.22, <= v4.6.22 or >= v4.6.21, <= v4.6.21 or >= v4.6.20, <= v4.6.20 or >= v4.6.19, <= v4.6.19 or >= v4.6.18, <= v4.6.18 or >= v4.6.16, <= v4.6.16 or >= v4.6.15, <= v4.6.15 or >= v4.6.14, <= v4.6.14 or >= v4.6.13, <= v4.6.13 or >= v4.6.12, <= v4.6.12 or >= v4.6.11, <= v4.6.11 or >= v4.6.10, <= v4.6.10 or >= v4.6.9, <= v4.6.9 or >= v4.5.149, <= v4.5.149 or >= v4.6.7, <= v4.6.7 or >= v4.6.6, <= v4.6.6 or >= v4.6.5, <= v4.6.5 or >= v4.6.4, <= v4.6.4 or >= v4.6.3, <= v4.6.3 or >= v4.6.2, <= v4.6.2 or >= v4.6.1, <= v4.6.1 or >= v4.5.148, <= v4.5.148 or >= v4.5.147, <= v4.5.147 or >= v4.5.146, <= v4.5.146 or >= v4.5.145, <= v4.5.145 or >= v4.5.144, <= v4.5.144 or >= v4.5.143, <= v4.5.143 or >= v4.5.140, <= v4.5.140 or >= v4.5.134, <= v4.5.134 or >= v4.5.133, <= v4.5.133 or >= v4.5.132, <= v4.5.132 or >= v4.5.131, <= v4.5.131 or >= v4.5.130, <= v4.5.130 or >= v4.5.129, <= v4.5.129 or >= v4.5.126, <= v4.5.126 or >= v4.5.128, <= v4.5.128 or >= v4.5.125, <= v4.5.125 or >= v4.5.124, <= v4.5.124 or >= v4.5.123, <= v4.5.123 or >= v4.5.122, <= v4.5.122 or >= v4.5.121, <= v4.5.121 or >= v4.5.120, <= v4.5.120 or >= v4.5.119, <= v4.5.119 or >= v4.5.118, <= v4.5.118 or >= v4.5.117, <= v4.5.117 or >= v4.5.115, <= v4.5.115 or >= v4.5.113, <= v4.5.113 or >= v4.5.112, <= v4.5.112 or >= v4.5.111, <= v4.5.111 or >= v4.5.110, <= v4.5.110 or >= v4.5.109, <= v4.5.109 or >= v4.5.108, <= v4.5.108 or >= v4.5.107, <= v4.5.107 or >= v4.5.106, <= v4.5.106 or >= v4.5.105, <= v4.5.105 or >= v4.5.104, <= v4.5.104 or >= v4.5.103, <= v4.5.103 or >= v4.5.102, <= v4.5.102 or >= v4.5.101, <= v4.5.101 or >= v4.5.100, <= v4.5.100 or >= v4.5.98, <= v4.5.98 or >= v4.5.96, <= v4.5.96 or >= v4.5.97, <= v4.5.97 or >= v4.5.95, <= v4.5.95 or >= v4.5.94, <= v4.5.94 or >= v4.5.93, <= v4.5.93 or >= v4.5.90, <= v4.5.90 or >= v4.5.88, <= v4.5.88 or >= v4.5.87, <= v4.5.87 or >= v4.5.85, <= v4.5.85 or >= v4.5.83, <= v4.5.83 or >= v4.5.82, <= v4.5.82 or >= v4.5.81, <= v4.5.81 or >= v4.5.80, <= v4.5.80 or >= v4.5.79, <= v4.5.79 or >= v4.5.78, <= v4.5.78 or >= v4.5.77, <= v4.5.77 or >= v4.5.76, <= v4.5.76 or >= v4.5.74, <= v4.5.74 or >= v4.5.73, <= v4.5.73 or >= v4.5.72, <= v4.5.72 or >= v4.5.71, <= v4.5.71 or >= v4.5.70, <= v4.5.70 or >= v4.5.69, <= v4.5.69 or >= v4.5.68, <= v4.5.68 or >= v4.5.67, <= v4.5.67 or >= v4.5.65, <= v4.5.65 or >= v4.5.64, <= v4.5.64 or >= v4.5.63, <= v4.5.63 or >= v4.5.62, <= v4.5.62 or >= v4.5.60, <= v4.5.60 or >= v4.5.59, <= v4.5.59 or >= v4.5.58, <= v4.5.58 or >= v4.5.57, <= v4.5.57 or >= v4.5.56, <= v4.5.56 or >= v4.5.55, <= v4.5.55 or >= v4.5.54, <= v4.5.54 or >= v4.5.52, <= v4.5.52 or >= v4.5.51, <= v4.5.51 or >= v4.5.49, <= v4.5.49 or >= v4.5.48, <= v4.5.48 or >= v4.5.46, <= v4.5.46 or >= v4.5.45, <= v4.5.45 or >= v4.5.44, <= v4.5.44 or >= v4.5.43, <= v4.5.43 or >= v4.5.42, <= v4.5.42 or >= v4.5.41, <= v4.5.41 or >= v4.5.40, <= v4.5.40 or >= v4.5.39, <= v4.5.39 or >= v4.5.38, <= v4.5.38 or >= v4.5.37, <= v4.5.37 or >= v4.5.36, <= v4.5.36 or >= v4.5.35, <= v4.5.35 or >= v4.5.34, <= v4.5.34 or >= v4.5.33, <= v4.5.33 or >= v4.5.32, <= v4.5.32 or >= v4.5.31, <= v4.5.31 or >= v4.5.30, <= v4.5.30 or >= v4.5.29, <= v4.5.29 or >= v4.5.28, <= v4.5.28 or >= v4.5.27, <= v4.5.27 or >= v4.5.26, <= v4.5.26 or >= v4.5.25, <= v4.5.25 or >= v4.5.24, <= v4.5.24 or >= v4.5.23, <= v4.5.23 or >= v4.5.22, <= v4.5.22 or >= v4.5.21, <= v4.5.21 or >= v4.5.20, <= v4.5.20 or >= v4.5.19, <= v4.5.19 or >= v4.5.18, <= v4.5.18 or >= v4.5.17, <= v4.5.17 or >= v4.5.16, <= v4.5.16 or >= v4.5.15, <= v4.5.15 or >= v4.5.14, <= v4.5.14 or >= v4.5.13, <= v4.5.13 or >= v4.5.12, <= v4.5.12 or >= v4.5.11, <= v4.5.11 or >= v4.5.10, <= v4.5.10 or >= v4.5.9, <= v4.5.9 or >= v4.5.8, <= v4.5.8 or >= v4.5.7, <= v4.5.7 or >= v4.5.6, <= v4.5.6 or >= v4.5.5, <= v4.5.5 or >= v4.5.3, <= v4.5.3 or >= v4.5.2, <= v4.5.2 or >= v4.5.1, <= v4.5.1 or >= v4.5.0, <= v4.5.0 or >= v4.4.12, <= v4.4.12 or >= v4.4.11, <= v4.4.11 or >= v4.4.10, <= v4.4.10 or >= v4.4.9, <= v4.4.9 or >= v4.4.8, <= v4.4.8 or >= v4.4.7, <= v4.4.7 or >= v4.4.6, <= v4.4.6 or >= v4.4.5, <= v4.4.5 or >= v0.2.0, <= v0.2.0 or >= praisonai@0.2.0, <= praisonai@0.2.0 or >= praisonai-derive@0.2.0, <= praisonai-derive@0.2.0 or >= praisonai-cli@0.2.0, <= praisonai-cli@0.2.0 or >= v2.8.0, <= v2.8.0 or >= v2.7.9, <= v2.7.9 or >= v2.7.8, <= v2.7.8 or >= v2.7.7, <= v2.7.7 or >= v2.7.6, <= v2.7.6 or >= v2.7.5, <= v2.7.5 or >= v2.7.4, <= v2.7.4 or >= v2.7.3, <= v2.7.3 or >= v2.7.2, <= v2.7.2 or >= v2.7.1, <= v2.7.1 or >= v2.7.0, <= v2.7.0 or >= v2.6.8, <= v2.6.8 or >= v2.6.7, <= v2.6.7 or >= v2.6.6, <= v2.6.6 or >= v2.6.5, <= v2.6.5 or >= v2.6.4, <= v2.6.4 or >= v2.6.3, <= v2.6.3 or >= v2.6.2, <= v2.6.2 or >= v2.6.1, <= v2.6.1 or >= v2.6.0, <= v2.6.0 or >= v2.5.7, <= v2.5.7 or >= v2.5.6, <= v2.5.6
- Patched version
- Not yet available
CVE-2026-44338GHSA-2JGC-F764-C5R2GHSA-6RMH-7XCM-CPXJ
PraisonAI's async Jobs API has reportedly no authentication, allowing unauthenticated job execution, result theft, cancel and delete. Users of affected versions should take immediate action.
What happened
An early warning has been issued regarding a vulnerability in PraisonAI's async Jobs API. The API, which is accessible at /api/v1/runs, appears to lack authentication controls. This means that any unauthenticated user could potentially execute jobs, steal results, or cancel and delete jobs. The server's default bind is 127.0.0.1, so remote exploitation would require additional configuration. This vulnerability affects a wide range of versions of the praisonai package on PyPI, as detailed in the affected components section.
The vulnerability was first flagged on 2026-08-25T15:14:27+00:00 and is currently under investigation. It has not been reported as exploited in the wild, and no supply-chain attack has been confirmed. Users are advised to monitor their systems for any unauthorized access or suspicious activity related to the PraisonAI Jobs API.
What to do about it
- Monitor for any unauthorized access or suspicious activity related to the PraisonAI Jobs API.
- Consider implementing authentication middleware to secure the PraisonAI Jobs API.
- Review your system configuration to ensure that the PraisonAI server is not inadvertently exposed to remote access.
- Consult the primary sources for the most up-to-date information and any potential fixes or patches.
How 0Day would have caught this
MATCHED TO YOUR ACTUAL DEPENDENCY GRAPH0Day matches every incoming threat signal against your GitHub organization’s full dependency graph, including transitive dependencies. If
praisonai is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
You are affected if you are using any version of the praisonai package on PyPI from v0.2.0 to v4.6.33, inclusive.
What should I do right now?
Monitor for any unauthorized access or suspicious activity related to the PraisonAI Jobs API and consider implementing authentication middleware.
Has this been exploited in the wild?
No, this vulnerability has not been reported as exploited in the wild.