This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: PraisonAI Gateway lacks auth on WebSocket & Info endpoints. ๐ **Consequences**: Attackers can connect, enumerate agents, and send arbitrary messages. Total loss of control!
Q2Root Cause? (CWE/Flaw)
๐ก๏ธ **Root Cause**: **CWE-306** (Missing Authentication for Critical Function). The gateway server fails to verify identity before allowing access to sensitive endpoints.
Q3Who is affected? (Versions/Components)
๐ฅ **Affected**: **PraisonAI** by Mervin Praison. Specifically versions **< 4.5.97**. If you are on an older build, you are at risk!
Q4What can hackers do? (Privileges/Data)
๐ **Attacker Powers**: ๐ Connect via WebSocket. ๐ Enumerate all agents. ๐ค Send **arbitrary messages**. High impact on Confidentiality & Integrity (CVSS: H/H).
Q5Is exploitation threshold high? (Auth/Config)
โก **Threshold**: **LOW**. ๐ซ No Auth required. ๐ Network Accessible. ๐ซ No User Interaction needed. CVSS Vector: AV:N/AC:L/PR:N/UI:N. Easy to exploit!
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ **Public Exp?**: **No PoC** listed in data. However, the flaw is critical and logic-based. Wild exploitation is likely imminent due to low barrier.
Q7How to self-check? (Features/Scanning)
๐ **Self-Check**: Scan for PraisonAI Gateway WebSocket endpoints. Test if `/info` or WS connections accept requests **without tokens/credentials**. If yes -> Vulnerable!
Q8Is it fixed officially? (Patch/Mitigation)
๐ ๏ธ **Fix**: **Yes**. Upgrade to **PraisonAI v4.5.97 or later**. Official advisory: [GitHub GHSA-cfh6-vr3j-qc3g](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfh6-vr3j-qc3g).
Q9What if no patch? (Workaround)
๐ง **No Patch?**: Isolate the Gateway server. Block external access to WebSocket ports. Implement WAF rules to require Auth headers on `/info` and WS routes.