PraisonAI AgentOS: Unauthenticated access to chat route (CVE-2026-57116)
PraisonAI AgentOS versions 4.2.1 through 4.6.58 contain an authentication bypass vulnerability in the FastAPI deployment surface, allowing unauthenticated requests to interact with agents.
CVE search metadata
CVE search record: CVE-2026-57116. Severity: critical. CVSS: 9.8. KEV: no. Product: AgentOS. Brief: PraisonAI AgentOS: Unauthenticated access to chat route (CVE-2026-57116). Brief link: https://feed.craftedsignal.io/briefs/2026-10-praisonai-auth-bypass-05a66b33/
Triage facts
Revision 1- Applicability
- AgentOS
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Oct 29, 19:57 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
PraisonAI AgentOS (versions 4.2.1 to before 4.6.59) features an unauthenticated FastAPI deployment surface. The chat route directly invokes agent.chat(request.message), allowing no-auth or wrong-bearer requests to trigger agents. This potentially allows unauthenticated clients to access agents configured with tools, private context, memory, API integrations, or cost-bearing model calls.