CyberRota Analysis
AI-GeneratedThe vulnerability affects PraisonAI versions 1.5.1 to 1.7.2, where the MCPSecurity.evaluatePolicy() function improperly handles authentication for Basic and OAuth methods, allowing unauthorized access to protected resources when non-empty Authorization headers are provided. This flaw poses a significant security risk, as it enables attackers to exploit invalid credentials to gain access to sensitive tools and data. Organizations using affected versions should prioritize upgrading to version 1.7.2 to mitigate potential breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer. Basic and OAuth policies accept any non-empty Authorization header without calling auth.validate(), then return an authenticated result, allowing callers with invalid credentials to access MCP tools and resources protected by those policies. This issue is fixed in version 1.7.2.