CVE-2026-57146: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in MervinPraison PraisonAI

PraisonAI, a multi-agent teams system, has an exposure of sensitive information vulnerability (CWE-200) due to unauthenticated access to A2U event streaming routes. Although version 4.5.115 addressed unauthenticated A2U event streaming, the current CLI entrypoint still exposes these routes without authentication because it calls create_a2u_routes(app) directly without setting the A2U_AUTH_TOKEN environment variable or enforcing API key middleware. The authentication helper disables auth if the token is missing, resulting in unauthorized access. This vulnerability is patched in version 4.6.61.

An unauthenticated attacker can access A2U event streaming routes and subscribe to events without authorization, leading to exposure of sensitive information. The vulnerability does not allow modification or denial of service but compromises confidentiality.

Upgrade to PraisonAI version 4.6.61 or later, where the issue is patched. The vendor advisory confirms the fix in 4.6.61. Until then, avoid using the vulnerable CLI entrypoint or ensure the A2U_AUTH_TOKEN environment variable is set to enforce authentication.