# CVE-2026-57131: PraisonAI unauthenticated API access to jobs endpoint

Source: https://junglewise.ai/threats/cve-2026-57131-praisonai-unauthenticated-api-access-to-jobs-endpoint  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-14. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-57131 · Severity: critical · CVSS 9.8 · Published 2026-09-14

PraisonAI is a multi-agent AI orchestration platform that manages automated teams of AI agents. The platform exposes its job management API without authentication, allowing anyone with network access to submit arbitrary agent tasks, read sensitive job data, steal service credentials, and manipulate or delete other users' jobs. This creates a complete takeover risk for any organization running PraisonAI without external authentication controls.

Technologies: [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-57131 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-57131 being exploited in the wild.

**How severe is CVE-2026-57131?** Critical severity, with a CVSS score of 9.8, published 14 September 2026.

**Which products and versions are affected?** praisonai (PyPI) ECOSYSTEM:introduced=0,fixed=4.6.59.

**Is there a fix for CVE-2026-57131?** Yes. praisonai (PyPI): upgrade to 4.6.59 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-57131 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-57131?** Check whether you run praisonai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- praisonai (PyPI): upgrade to 4.6.59 or later

  ```sh
  pip install "praisonai>=4.6.59"
  ```


## Technical details

The vulnerability is an authentication bypass in the praisonai.jobs.server.create_app function, which mounts the job management router (praisonai.jobs.router.create_router) at /api/v1/runs without any authentication or authorization checks. A network-accessible attacker can call these endpoints to submit attacker-controlled prompts and agent configurations, enumerate and read job details and results, stream job output, and cancel or delete other jobs. The attack requires only network reachability to the API endpoint; no credentials or user interaction are required. This exposes service credentials configured in agents and the capabilities of connected tools to arbitrary execution. The vulnerability is fixed in version 4.6.58 by adding input validation, query parameterization, and authentication controls.

## Affected products

- Mervin Praison PraisonAI prior to 4.6.58

## Identifiers

- CVE-2026-57131
- GHSA-fq2m-6wqh-x44g
- PYSEC-2026-3511

## Timeline

- 2026-09-14: disclosed
- 2026-06-13: patched: Version 4.6.58 released with authentication and input validation hardening

## References

- [https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1](https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1)
- [https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58](https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58)

## Related threats

- [PraisonAI authentication bypass in A2U event streaming](https://junglewise.ai/threats/cve-2026-57146-praisonai-a2u-incomplete-authentication-fix-leaves-current-serve)
- [PraisonAI sandbox escape when Landlock unavailable](https://junglewise.ai/threats/cve-2026-57144-praisonai-sandlocksandbox-falls-back-to-unrestricted-subprocess)
- [PraisonAI recipe policy bypass via YAML-approved tools](https://junglewise.ai/threats/cve-2026-57142-praisonai-recipe-workflow-policy-can-be-bypassed-by-declaring-and)
- [PraisonAI shell command injection in compute-bridged file tools](https://junglewise.ai/threats/cve-2026-57117-praisonai-compute-bridged-file-tools-allow-shell-command)
- [PraisonAI AgentOS authentication bypass in FastAPI deployment](https://junglewise.ai/threats/cve-2026-57116-praisonai-agentos-remains-unauthenticated-after-incomplete-fix)