Opening SecureFlowPraisonAI AgentMail: An Unsigned Webhook Starts an Agent Run
Case summary & sources

AIDEFEND SecureFlow / SecureFlow Case Index

PraisonAI aidefend-sf0069

PraisonAI AgentMail: An Unsigned Webhook Starts an Agent Run

  • Autonomous Agents
  • Data Exfiltration
  • Resource Hijacking & Cost

PraisonAI connects AI agents to messaging services. Its affected AgentMail webhook handler accepted an unsigned network request as an incoming email, trusted the supplied sender, and dispatched the text into an agent session. A local runtime test reached a canary agent through the real handler; it did not send real email or demonstrate a dangerous tool executing. The vulnerability is tracked as CVE-2026-61428 and fixed in 4.6.78.

Mapped threat techniques

  • AML.T0049 Exploit Public-Facing Application

Source

Updated