CVE-2026-61435: PraisonAI: Call API localhost-only authentication bypass via spoofed Host header
PraisonAI’s patched PRAISONAI_CALL_AUTH=disabled safeguard for the n8n/call agent invocation API can be bypassed with a spoofed Host: 127.0.0.1 header, allowing an unauthenticated network caller to list and invoke registered agents when the service is reachable and the opt-out is enabled.
References
- github.com/MervinPraison/PraisonAI/commit/2a855c470077c7d2e2479a575f7ef7f548d51c33
- github.com/MervinPraison/PraisonAI/commit/846568c7a5d8ce9e71e56e4c213f027c04909753
- github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2gpf-2492-q9jh
- github.com/advisories/GHSA-2gpf-2492-q9jh
- nvd.nist.gov/vuln/detail/CVE-2026-61435
- nvd.nist.gov/vuln/detail/CVE-2026-62174
- www.vulncheck.com/advisories/praisonai-before-authentication-bypass-via-host-header-spoofing
Code Behaviors & Features
Detect and mitigate CVE-2026-61435 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →