PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the public dev-secret-change-me HS256 signing key when PLATFORM_JWT_SECRET is unset, while the startup and token-issuance guards are disabled because PLATFORM_ENV also defaults to dev. An unauthenticated attacker can sign a JWT containing an attacker-chosen sub value, and AuthService._verify_token() accepts it as an authenticated identity, enabling user or workspace-owner impersonat

PraisonAI, a multi-agent teams system, contains a critical authentication bypass vulnerability in versions prior to 0.1.6. The auth_service.py file falls back to a hardcoded public signing key 'dev-secret-change-me' when the PLATFORM_JWT_SECRET environment variable is unset. Additionally, startup and token-issuance guards are disabled when PLATFORM_ENV defaults to 'dev'. An unauthenticated attacker can forge a JWT token with an arbitrary 'sub' value, which AuthService._verify_token() accepts as a valid authenticated identity. This allows full impersonation of any user or workspace owner when their identifier is known. The vulnerability has been patched in praisonai-platform version 0.1.6.