https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 29 Oct 2026 02:35:49 +0000 https://db.gcve.eu/vuln/cve-2026-61428 <p><strong>Affected:</strong> MervinPraison PraisonAI</p> <p>PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with spoofed sender addresses. Attackers can POST crafted message.received events to the webhook endpoint to inject arbitrary content into the agent and trigger replies to attacker-controlled addresses, bypassing sender allow/block lists.</p> <p><strong>Affected:</strong> MervinPraison PraisonAI</p> <p>PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with spoofed sender addresses. Attackers can POST crafted message.received events to the webhook endpoint to inject arbitrary content into the agent and trigger replies to attacker-controlled addresses, bypassing sender allow/block lists.</p> https://db.gcve.eu/vuln/cve-2026-61428 https://db.gcve.eu/vuln/pysec-2026-4259 <p><strong>Affected:</strong> PyPI: praisonai</p> <p>## Summary</p> <p>PraisonAI&#39;s AgentMail bot, when run in webhook (or hybrid) mode, starts an aiohttp webhook server bound to `0.0.0.0` and processes inbound `message.received` events **without verifying any signature/HMAC and without authentication**. The sender address and message body are taken directly from the attacker-controlled request body, so any network peer can inject messages into the agent with a spoofed sender (bypassing sender allow/block lists) and have the agent process the content and reply to an attacker-chosen address. Sibling bots (`linear.py`, `whatsapp.py`) fail closed when no secret is configured; AgentMail omits the check entirely. Runtime-confirmed; severity Medium.</p> <p>## Details</p> <p>### Affected component - Package: `praisonai` 4.6.63. File: `src/praisonai/praisonai/bots/agentmail.py` (`AgentMailBot`, webhook/hybrid mode).</p> <p>### Vulnerable code / root cause</p> <p>Path: `src/praisonai/praisonai/bots/agentmail.py`</p> <p>Function: `_start_webhook_mode` / `_handle_email_webhook` / `_handle_message`</p> <p>Snippet: ```python # _start_webhook_mode: binds all interfaces self._webhook_site = web.TCPSite(self._webhook_runner, &#34;0.0.0.0&#34;, self._webhook_port)</p> <p># _handle_email_webhook: no signature/HMAC check, no auth body = await request.json() if body.get(&#34;type&#34;) != &#34;message.received&#34;: return web.Response(status=200, text=&#34;OK&#34;) asyncio.create_task(self._process_webhook_payload(body)) # dispatch attacker body return web.Response(status=200, text=&#34;OK&#34;)</p> <p># _handle_message: agent proce…</p> <p><strong>Affected:</strong> PyPI: praisonai</p> <p>## Summary</p> <p>PraisonAI&#39;s AgentMail bot, when run in webhook (or hybrid) mode, starts an aiohttp webhook server bound to `0.0.0.0` and processes inbound `message.received` events **without verifying any signature/HMAC and without authentication**. The sender address and message body are taken directly from the attacker-controlled request body, so any network peer can inject messages into the agent with a spoofed sender (bypassing sender allow/block lists) and have the agent process the content and reply to an attacker-chosen address. Sibling bots (`linear.py`, `whatsapp.py`) fail closed when no secret is configured; AgentMail omits the check entirely. Runtime-confirmed; severity Medium.</p> <p>## Details</p> <p>### Affected component - Package: `praisonai` 4.6.63. File: `src/praisonai/praisonai/bots/agentmail.py` (`AgentMailBot`, webhook/hybrid mode).</p> <p>### Vulnerable code / root cause</p> <p>Path: `src/praisonai/praisonai/bots/agentmail.py`</p> <p>Function: `_start_webhook_mode` / `_handle_email_webhook` / `_handle_message`</p> <p>Snippet: ```python # _start_webhook_mode: binds all interfaces self._webhook_site = web.TCPSite(self._webhook_runner, &#34;0.0.0.0&#34;, self._webhook_port)</p> <p># _handle_email_webhook: no signature/HMAC check, no auth body = await request.json() if body.get(&#34;type&#34;) != &#34;message.received&#34;: return web.Response(status=200, text=&#34;OK&#34;) asyncio.create_task(self._process_webhook_payload(body)) # dispatch attacker body return web.Response(status=200, text=&#34;OK&#34;)</p> <p># _handle_message: agent proce…</p> https://db.gcve.eu/vuln/pysec-2026-4259