CVE-2026-61436: PraisonAI Webhook Signature Verification Bypass
A vulnerability in PraisonAI before version 4.6.78 allows unauthenticated attackers to forge message.received events by sending crafted JSON payloads to the webhook endpoint, potentially invoking configured agents with arbitrary sender addresses and message content. This vulnerability has a CVSS score of 8.6 and is classified as HIGH severity.