Auth bypass in Mervinpraison Praisonai
CVE-2026-57134
PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer. Basic and OAuth policies accept any non-empty Authorization header without calling auth.validate(), then return an authenticated result, allowing callers with invalid credentials to access MCP tools and resources protected by those policies. This issue is fixed in version 1.7.2.
Vulnerability class: Broken Authentication
CVSS v3 metric
CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.
Affected products
- Mervinpraison Praisonai — versions >= 1.5.1, < 1.7.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-57134?
- CVE-2026-57134 is a high-severity vulnerability in Mervinpraison Praisonai, classified under Improper Authentication. CVSS score: 8.2/10. Published 2026-09-15.
- How severe is CVE-2026-57134?
- High severity. CVSS v3 base score is 8.2 out of 10.