{"vulnerability": "cve-2026-57127", "sightings": [{"uuid": "7e00da54-378a-4e69-9b46-0f7a659112dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57127", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4hj-7hfh-g2f4", "content": "", "creation_timestamp": "2026-07-20T22:36:24.641022Z"}, {"uuid": "c3f6e450-4741-499b-9d59-6ad806e49aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57127", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcoi3qaq2u", "content": "CVE-2026-57127 - praisonai\nThe PraisonAI recipe serve auth middleware can be disabled unintentionally if no secret key is set. This can leave your API unprotected. To fix this, ensure you set the secret key in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #pip #CVE #infosec", "creation_timestamp": "2026-07-23T16:58:05.923424Z"}, {"uuid": "73ecee4b-48bf-406f-83df-2d2eb03ae85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57127", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipc2mj652b", "content": "\ud83d\udea8 CVE-2026-57127 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWT...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57127\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:07:53.074963Z"}]}