PraisonAI async Jobs API Authentication Bypass: Early Warning
EARLY WARNING · UNCONFIRMED. This page describes a developing threat that 0Day surfaced from early signals and has not yet independently confirmed. Details may change. Always verify against the primary sources before acting.
- Severity
- HIGH
- Affected component
- praisonai (pypi)
- Affected versions
- >= v4.6.33, <= v4.6.33 or >= v4.6.32, <= v4.6.32 or >= v4.6.31, <= v4.6.31 or >= v4.6.30, <= v4.6.30 or >= v4.6.29, <= v4.6.29 or >= v4.6.28, <= v4.6.28 or >= v4.6.27, <= v4.6.27 or >= v4.6.26, <= v4.6.26 or >= v4.6.25, <= v4.6.25 or >= v4.6.24, <= v4.6.24 or >= v4.6.23, <= v4.6.23 or >= v4.6.22, <= v4.6.22 or >= v4.6.21, <= v4.6.21 or >= v4.6.20, <= v4.6.20 or >= v4.6.19, <= v4.6.19 or >= v4.6.18, <= v4.6.18 or >= v4.6.16, <= v4.6.16 or >= v4.6.15, <= v4.6.15 or >= v4.6.14, <= v4.6.14 or >= v4.6.13, <= v4.6.13 or >= v4.6.12, <= v4.6.12 or >= v4.6.11, <= v4.6.11 or >= v4.6.10, <= v4.6.10 or >= v4.6.9, <= v4.6.9 or >= v4.5.149, <= v4.5.149 or >= v4.6.7, <= v4.6.7 or >= v4.6.6, <= v4.6.6 or >= v4.6.5, <= v4.6.5 or >= v4.6.4, <= v4.6.4 or >= v4.6.3, <= v4.6.3 or >= v4.6.2, <= v4.6.2 or >= v4.6.1, <= v4.6.1 or >= v4.5.148, <= v4.5.148 or >= v4.5.147, <= v4.5.147 or >= v4.5.146, <= v4.5.146 or >= v4.5.145, <= v4.5.145 or >= v4.5.144, <= v4.5.144 or >= v4.5.143, <= v4.5.143 or >= v4.5.140, <= v4.5.140 or >= v4.5.134, <= v4.5.134 or >= v4.5.133, <= v4.5.133 or >= v4.5.132, <= v4.5.132 or >= v4.5.131, <= v4.5.131 or >= v4.5.130, <= v4.5.130 or >= v4.5.129, <= v4.5.129 or >= v4.5.126, <= v4.5.126 or >= v4.5.128, <= v4.5.128 or >= v4.5.125, <= v4.5.125 or >= v4.5.124, <= v4.5.124 or >= v4.5.123, <= v4.5.123 or >= v4.5.122, <= v4.5.122 or >= v4.5.121, <= v4.5.121 or >= v4.5.120, <= v4.5.120 or >= v4.5.119, <= v4.5.119 or >= v4.5.118, <= v4.5.118 or >= v4.5.117, <= v4.5.117 or >= v4.5.115, <= v4.5.115 or >= v4.5.113, <= v4.5.113 or >= v4.5.112, <= v4.5.112 or >= v4.5.111, <= v4.5.111 or >= v4.5.110, <= v4.5.110 or >= v4.5.109, <= v4.5.109 or >= v4.5.108, <= v4.5.108 or >= v4.5.107, <= v4.5.107 or >= v4.5.106, <= v4.5.106 or >= v4.5.105, <= v4.5.105 or >= v4.5.104, <= v4.5.104 or >= v4.5.103, <= v4.5.103 or >= v4.5.102, <= v4.5.102 or >= v4.5.101, <= v4.5.101 or >= v4.5.100, <= v4.5.100 or >= v4.5.98, <= v4.5.98 or >= v4.5.96, <= v4.5.96 or >= v4.5.97, <= v4.5.97 or >= v4.5.95, <= v4.5.95 or >= v4.5.94, <= v4.5.94 or >= v4.5.93, <= v4.5.93 or >= v4.5.90, <= v4.5.90 or >= v4.5.88, <= v4.5.88 or >= v4.5.87, <= v4.5.87 or >= v4.5.85, <= v4.5.85 or >= v4.5.83, <= v4.5.83 or >= v4.5.82, <= v4.5.82 or >= v4.5.81, <= v4.5.81 or >= v4.5.80, <= v4.5.80 or >= v4.5.79, <= v4.5.79 or >= v4.5.78, <= v4.5.78 or >= v4.5.77, <= v4.5.77 or >= v4.5.76, <= v4.5.76 or >= v4.5.74, <= v4.5.74 or >= v4.5.73, <= v4.5.73 or >= v4.5.72, <= v4.5.72 or >= v4.5.71, <= v4.5.71 or >= v4.5.70, <= v4.5.70 or >= v4.5.69, <= v4.5.69 or >= v4.5.68, <= v4.5.68 or >= v4.5.67, <= v4.5.67 or >= v4.5.65, <= v4.5.65 or >= v4.5.64, <= v4.5.64 or >= v4.5.63, <= v4.5.63 or >= v4.5.62, <= v4.5.62 or >= v4.5.60, <= v4.5.60 or >= v4.5.59, <= v4.5.59 or >= v4.5.58, <= v4.5.58 or >= v4.5.57, <= v4.5.57 or >= v4.5.56, <= v4.5.56 or >= v4.5.55, <= v4.5.55 or >= v4.5.54, <= v4.5.54 or >= v4.5.52, <= v4.5.52 or >= v4.5.51, <= v4.5.51 or >= v4.5.49, <= v4.5.49 or >= v4.5.48, <= v4.5.48 or >= v4.5.46, <= v4.5.46 or >= v4.5.45, <= v4.5.45 or >= v4.5.44, <= v4.5.44 or >= v4.5.43, <= v4.5.43 or >= v4.5.42, <= v4.5.42 or >= v4.5.41, <= v4.5.41 or >= v4.5.40, <= v4.5.40 or >= v4.5.39, <= v4.5.39 or >= v4.5.38, <= v4.5.38 or >= v4.5.37, <= v4.5.37 or >= v4.5.36, <= v4.5.36 or >= v4.5.35, <= v4.5.35 or >= v4.5.34, <= v4.5.34 or >= v4.5.33, <= v4.5.33 or >= v4.5.32, <= v4.5.32 or >= v4.5.31, <= v4.5.31 or >= v4.5.30, <= v4.5.30 or >= v4.5.29, <= v4.5.29 or >= v4.5.28, <= v4.5.28 or >= v4.5.27, <= v4.5.27 or >= v4.5.26, <= v4.5.26 or >= v4.5.25, <= v4.5.25 or >= v4.5.24, <= v4.5.24 or >= v4.5.23, <= v4.5.23 or >= v4.5.22, <= v4.5.22 or >= v4.5.21, <= v4.5.21 or >= v4.5.20, <= v4.5.20 or >= v4.5.19, <= v4.5.19 or >= v4.5.18, <= v4.5.18 or >= v4.5.17, <= v4.5.17 or >= v4.5.16, <= v4.5.16 or >= v4.5.15, <= v4.5.15 or >= v4.5.14, <= v4.5.14 or >= v4.5.13, <= v4.5.13 or >= v4.5.12, <= v4.5.12 or >= v4.5.11, <= v4.5.11 or >= v4.5.10, <= v4.5.10 or >= v4.5.9, <= v4.5.9 or >= v4.5.8, <= v4.5.8 or >= v4.5.7, <= v4.5.7 or >= v4.5.6, <= v4.5.6 or >= v4.5.5, <= v4.5.5 or >= v4.5.3, <= v4.5.3 or >= v4.5.2, <= v4.5.2 or >= v4.5.1, <= v4.5.1 or >= v4.5.0, <= v4.5.0 or >= v4.4.12, <= v4.4.12 or >= v4.4.11, <= v4.4.11 or >= v4.4.10, <= v4.4.10 or >= v4.4.9, <= v4.4.9 or >= v4.4.8, <= v4.4.8 or >= v4.4.7, <= v4.4.7 or >= v4.4.6, <= v4.4.6 or >= v4.4.5, <= v4.4.5 or >= v0.2.0, <= v0.2.0 or >= praisonai@0.2.0, <= praisonai@0.2.0 or >= praisonai-derive@0.2.0, <= praisonai-derive@0.2.0 or >= praisonai-cli@0.2.0, <= praisonai-cli@0.2.0 or >= v2.8.0, <= v2.8.0 or >= v2.7.9, <= v2.7.9 or >= v2.7.8, <= v2.7.8 or >= v2.7.7, <= v2.7.7 or >= v2.7.6, <= v2.7.6 or >= v2.7.5, <= v2.7.5 or >= v2.7.4, <= v2.7.4 or >= v2.7.3, <= v2.7.3 or >= v2.7.2, <= v2.7.2 or >= v2.7.1, <= v2.7.1 or >= v2.7.0, <= v2.7.0 or >= v2.6.8, <= v2.6.8 or >= v2.6.7, <= v2.6.7 or >= v2.6.6, <= v2.6.6 or >= v2.6.5, <= v2.6.5 or >= v2.6.4, <= v2.6.4 or >= v2.6.3, <= v2.6.3 or >= v2.6.2, <= v2.6.2 or >= v2.6.1, <= v2.6.1 or >= v2.6.0, <= v2.6.0 or >= v2.5.7, <= v2.5.7 or >= v2.5.6, <= v2.5.6
- Patched version
- Not yet available
CVE-2026-44338GHSA-2JGC-F764-C5R2GHSA-6RMH-7XCM-CPXJ
An early warning has been issued regarding PraisonAI's async Jobs API, which reportedly lacks authentication. This vulnerability allows unauthenticated job execution, result theft, and job cancellation or deletion.
What happened
The PraisonAI async Jobs API, specifically the `/api/v1/runs` endpoint, is under investigation for an authentication bypass vulnerability. This issue permits unauthenticated users to execute jobs, steal results, and cancel or delete jobs. The server's default configuration binds to 127.0.0.1, meaning remote exploitation requires additional configuration. The vulnerability affects a wide range of PraisonAI versions, from v0.2.0 to v4.6.33 inclusive.
Users of PraisonAI are advised to monitor their Jobs API for any signs of unauthorized access. Implementing authentication middleware to secure the API endpoints is recommended as a precautionary measure.
What to do about it
- Monitor your PraisonAI Jobs API for any unauthorized access.
- Consider implementing authentication middleware to secure the API endpoints.
- Consult the primary sources for updates on this vulnerability, as no official fix has been published yet.
How 0Day would have caught this
MATCHED TO YOUR ACTUAL DEPENDENCY GRAPH0Day matches every incoming threat signal against your GitHub organization’s full dependency graph, including transitive dependencies. If
praisonai is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
You are affected if you are using PraisonAI versions from v0.2.0 to v4.6.33 inclusive.
What should I do right now?
Monitor your PraisonAI Jobs API for any unauthorized access and consider implementing authentication middleware to secure the API endpoints.
Is there an official fix available?
No official fix has been published yet. Monitor the primary sources for updates.