PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer. Basic and OAuth policies accept any non-empty Authorization header without calling auth.validate(), then return an authenticated result, allowing callers with invalid credentials to access MCP tools and resources protected by those policies. This issue is fixed in version 1.7.2.

A critical authentication bypass vulnerability exists in PraisonAI, a multi-agent teams system, affecting versions 1.5.1 through 1.7.2. The flaw resides in MCPSecurity.evaluatePolicy() within src/praisonai-ts/src/mcp/security.ts. The credential validator is only invoked for api-key or bearer authentication methods, while Basic and OAuth policies accept any non-empty Authorization header without calling auth.validate(). This logic flaw allows attackers with invalid credentials to bypass authentication and gain unauthorized access to MCP tools and resources protected by Basic or OAuth policies. The vulnerability has been assigned CVE-2026-57134 and is classified as a significant authentication control failure. A fix was released in version 1.7.2. Organizations using PraisonAI with Basic or OAuth authentication policies should upgrade immediately to mitigate the risk of unauthorized access.