Twenty GitHub advisories land on PraisonAI in one day, fifteen of them high severity, and most are authentication that silently does nothing

GitHub Advisory Database·high signalXBlueskyLinkedInCopy link

On 25 August the GitHub advisory database published 20 advisories against PraisonAI and praisonaiagents (1 critical, 15 high, 4 medium). The recurring shape is auth that is declared but never enforced: `praisonai serve agents --api-key` is silently ignored, `AgentServer` declares `auth_token` and enforces it on no route, the Recipe server fails open when API-key or JWT auth is configured, and the async Jobs API `/api/v1/runs` has no authentication at all. The rest are SSRF via DNS rebinding and redirect-following, workspace escape via symlinks, and an `ast_grep_rewrite` tool that rewrites arbitrary files without the `@require_approval` gate.