Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/08/25 3:14 p.m.8 views

PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete

Summary PraisonAI's async Jobs API the FastAPI service in praisonai/jobs/ installs its router with no authentication middleware, no router-level dependency, and no per-route auth check. Any caller who can reach the jobs server can submit agent jobs executed against the operator's configured LLM...

8.6CVSS8.2AI score0.28571EPSS
SaveExploits3References4Affected Software1
Rows per page
Query Builder