PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py assigns the public dev-secret-change-me value to JWT_SECRET when PLATFORM_JWT_SECRET is unset, and its production guard does not run when PLATFORM_ENV is also unset because that setting defaults to dev. A remote unauthenticated attacker can mint an HS256 token with an arbitrary sub and email, and the platform's AuthService._verify_token() and get_current_user dependency accept the forged identity

PraisonAI, a multi-agent teams system, contains a critical authentication bypass vulnerability prior to version 0.1.6. The auth_service.py file assigns a hardcoded public default value 'dev-secret-change-me' to JWT_SECRET when PLATFORM_JWT_SECRET is not set. The production security guard fails to activate when PLATFORM_ENV is unset, as it defaults to 'dev' mode. An unauthenticated remote attacker can forge HS256 JWT tokens with arbitrary user identity fields. The forged tokens are accepted by AuthService._verify_token() and get_current_user, granting unauthorized access to protected API routes. This effectively allows full authentication bypass without any credentials. The vulnerability is fixed in praisonai-platform version 0.1.6 released via GitHub commit e0fb8e7dd1ee6759c18ed07f436c21dbd9c20747.