{"schema":"threatline.record/2","record":{"id":"CVE-2026-56836","aliases":["GHSA-5qw8-f2g9-ff29","PYSEC-2026-3502"],"summary":"PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard","details":"PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe command is registered in the Typer app and praisonai recipe serve dispatches to the deprecated Typer command in src/praisonai/praisonai/cli/commands/recipe.py. That Typer command can start the Recipe HTTP server on a non-localhost interface with no authentication. It prints a deprecation warning, and then launches the server. Because config.auth is absent, create_app() does not attach the API-key or JWT middleware. Unauthenticated requests can then reach the recipe API and, when enabled, /admin/reload. This issue has been patched in version 4.6.59.","categories":["Libraries & packages"],"product":"PraisonAI","vendor":"MervinPraison","ecosystem":"PyPI","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56836","source_modified_at":"2026-10-23T11:57:28.192Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"PraisonAI","vendor":"MervinPraison","versions":[{"status":"affected","version":">= 4.5.112, < 4.6.59"}],"defaultStatus":null},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-5qw8-f2g9-ff29","source_modified_at":"2026-07-23T15:11:23.450950108Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"praisonai","ecosystem":"PyPI","purl":"pkg:pypi/praisonai"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.5.112"},{"fixed":"4.6.59"}]}],"versions":["4.5.112","4.5.113","4.5.114","4.5.115","4.5.117","4.5.118","4.5.119","4.5.120","4.5.121","4.5.122","4.5.123","4.5.124","4.5.125","4.5.126","4.5.127","4.5.128","4.5.129","4.5.130","4.5.131","4.5.132","4.5.133","4.5.134","4.5.135","4.5.136","4.5.137","4.5.139","4.5.140","4.5.143","4.5.144","4.5.145","4.5.149","4.6.10","4.6.11","4.6.12","4.6.13","4.6.14","4.6.15","4.6.16","4.6.18","4.6.19","4.6.20","4.6.21","4.6.22","4.6.23","4.6.24","4.6.25","4.6.26","4.6.27","4.6.28","4.6.29"]}],"fixed_versions":[{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-5qw8-f2g9-ff29","source_modified_at":"2026-07-23T15:11:23.450950108Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"praisonai","ecosystem":"PyPI","purl":"pkg:pypi/praisonai"},"version":"4.6.59"}],"cvss":8.2,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-23T11:57:28.192Z","modified_at":"2026-10-23T11:57:28.192Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-56836","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T11:57:28.192Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-5qw8-f2g9-ff29","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-07-23T15:11:23.450950108Z"}],"sources":["CVE List","OSV"],"references":[{"source":"CVE List","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5qw8-f2g9-ff29","tags":["x_refsource_CONFIRM"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-23T11:57:28.192Z","content_hash":"6c9a447a844ca64c586f6bce7f4be4848b6b622b23f13f5b809815057ab76f81"}}