MervinPraison praisonai-platform up to 0.1.3 JWT Signing Secret PLATFORM_JWT_SECRET/PLATFORM_ENV hard-coded credentials

Summaryinfo

A vulnerability was found in MervinPraison praisonai-platform up to 0.1.3. It has been declared as critical. This vulnerability affects unknown code of the component JWT Signing Secret. The manipulation of the argument PLATFORM_JWT_SECRET/PLATFORM_ENV results in hard-coded credentials. This vulnerability was named CVE-2026-47410. The attack may be performed from remote. There is no available exploit.

Detailsinfo

A vulnerability classified as critical has been found in MervinPraison praisonai-platform up to 0.1.3. Affected is some unknown processing of the component JWT Signing Secret. The manipulation of the argument PLATFORM_JWT_SECRET/PLATFORM_ENV with an unknown input leads to a hard-coded credentials vulnerability. CWE is classifying the issue as CWE-798. The product contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal `"dev-secret-change-me"` when `PLATFORM_JWT_SECRET` is unset. A safety check exists but only fires when `PLATFORM_ENV != "dev"`; the default value of `PLATFORM_ENV` is `"dev"`, so the check is silently bypassed in any deployment that does not explicitly opt out. The attacker reads the literal from this public source file, mints a JWT with arbitrary `sub` and `email` claims, and authenticates as any existing user (including workspace owners and admins). PraisonAI Platform version 0.1.4 patches the issue.

The advisory is shared for download at github.com. This vulnerability is traded as CVE-2026-47410 since 05/19/2026. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1110.001.

Upgrading to version 0.1.4 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• MervinPraison

Name

• praisonai-platform

Version

• 0.1.0
• 0.1.1
• 0.1.2
• 0.1.3

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion