# Duplicate Advisory: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent…

Source: https://junglewise.ai/threats/duplicate-advisory-praisonai-agentos-defaults-to-network-exposed-no-8ca29195  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-11  
License: CC BY 4.0 with a link back

Severity: high · CVSS 8.6 · Published 2026-07-11

### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-6wjp-v33h-5cvq. This link is maintained to preserve external references.

### Original Description
PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS. Unauthenticated attackers can call GET /api/agents to read agent instructions and system prompts, or POST /api/chat to invoke agents without authentication.

Technologies: [praisonai (npm)](https://junglewise.ai/threats/technologies/npm-praisonai). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** High severity, with a CVSS score of 8.6, published 11 July 2026.

**Which products and versions are affected?** praisonai (npm) < 1.7.3.

**Is there a fix for This vulnerability?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected?** Check whether you run praisonai (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- praisonai (npm) < 1.7.3

## Related threats

- [PraisonAI codeMode tool remote code execution via sandbox escape](https://junglewise.ai/threats/cve-2026-57141-praisonai-codemode-tool-remote-code-execution-via-sandbox-escape)
- [npm PraisonAI codeMode sandbox escape via Function constructor](https://junglewise.ai/threats/cve-2026-57138-npm-praisonai-codemode-sandbox-escape-via-function-constructor)
- [PraisonAI AgentLoop approval bypass via post-execution callback](https://junglewise.ai/threats/cve-2026-57137-praisonai-agentloop-approval-bypass-via-post-execution-callback)
- [PraisonAI SandboxExecutor command allowlist bypass via shell chaining](https://junglewise.ai/threats/cve-2026-57136-praisonai-sandboxexecutor-command-allowlist-bypass-via-shell)
- [PraisonAI SandboxExecutor network isolation bypass via non-proxy-aware clients](https://junglewise.ai/threats/cve-2026-57135-praisonai-sandboxexecutor-network-isolation-bypass-via-non-proxy)