CVE-2025-57129: Unauthenticated SSE /publish endpoint allows event injection in PraisoAI

Key Vulnerability Information Summary Vulnerability Overview Title: Unauthenticated Event Injection via SSE Endpoint CVE ID: CVE-2025-57129 Severity: Medium (CVSS v3.1 Score 4.3/10) Affected Package: Affected Versions: = 1.6.59 Weakness: CWE-306 (Missing Authentication for Critical Data) Description: The endpoint exposed in the SSE (Server-Sent Events) server at allows arbitrary event messages to be broadcast to all connected clients without any authentication. An field is defined in , but this token is never validated in the request handlers for or . Any attacker with access to the SSE server port can inject arbitrary events into the SSE streams of all connected clients, or invoke the endpoint to leak server configuration (including the number of connected clients). Scope of Impact If an attacker can access the SSE server port (default 8765, default bound to ), they can: - Inject arbitrary events into the SSE streams, potentially pushing malicious data, triggers, or executable content to connected client applications - Leak server configuration, including the number of connected clients and server settings (via the endpoint), for reconnaissance Since the default binding is the local loopback address, containerized or cloud deployments often override the host to to allow external access. In such cases, this vulnerability can be exploited from the network side without authentication. Remediation 1. Validate the in the and handlers 2. Apply the same token validation to (read-only) and 3. The default binding to is appropriate and should be maintained; issue a warning when it is overridden to 4. Document the configuration option and recommend enabling it Proof of Concept (POC) Unauthenticated Event Injection (Positive Trigger): Expected response: This response confirms that the event was broadcast to all connected clients and reveals the number of connected clients. Information Disclosure (Positive Trigger): Expected response: Negative Control (If Authentication Is Enabled): Requests without a valid header should return ; the current implementation returns with no authentication check. Suggested Fix Code:

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-57129: Unauthenticated SSE /publish endpoint allows event injection in PraisoAI

More from this source