Skip to content
Threat Feed
Subscribe

Tag

Email-Spoofing

1 brief RSS
high advisory

CVE-2026-61428: PraisonAI AgentMail Webhook Signature Bypass

PraisonAI AgentMail versions before 4.6.78 are vulnerable to CVE-2026-61428, an authentication bypass flaw in webhook mode that allows unauthenticated attackers to inject messages with spoofed sender addresses, enabling them to trigger replies to attacker-controlled addresses and bypass email filtering.

PraisonAI AgentMail authentication-bypass web-exploitation message-injection email-spoofing cve
3t 1c