Insecure Default Initialization of Resource Affecting praisonai-platform package, versions [,0.1.6)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-PYTHON-PRAISONAIPLATFORM-17660614
- published27 Jun 2026
- disclosed18 Jun 2026
- creditUnknown
Introduced: 18 Jun 2026
CVE-2026-57147 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade praisonai-platform to version 0.1.6 or higher.
Overview
praisonai-platform is a Platform layer for PraisonAI — workspace, auth, issues, projects
Affected versions of this package are vulnerable to Insecure Default Initialization of Resource in the auth_service.py process. An attacker can gain unauthorized access to any user account and perform actions as that user by forging authentication tokens signed with the known default secret.