CVE-2026-57116

Summary

PraisonAI's AgentOS FastAPI deployment exposes an unauthenticated chat endpoint that directly executes agent logic without verifying credentials, allowing any remote attacker to trigger agents with access to private tools, context, memory, and cost-bearing API calls.

Exploitability

Trivial to exploit over the network with no authentication or user interaction required; any HTTP client can send a POST request to the chat route.

Blast radius

Attackers can abuse deployed agents to exfiltrate sensitive data, perform unauthorized actions via integrated tools, or incur financial costs through model API calls.

Detection

Look for POST requests to the /chat endpoint without a valid Authorization header, especially from external or unexpected IP addresses; repeated or high-volume requests to this endpoint may indicate exploitation attempts.

Prioritized remediation

Upgrade to PraisonAI version 4.6.59 or later, which patches the missing authentication on the AgentOS FastAPI chat endpoint.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.