An unauthenticated resource exhaustion vulnerability in MervinPraison PraisonAI allows attackers to drain API credits and crash services via the /media-stream WebSocket endpoint.

This vulnerability involves a failure to implement authentication or rate limiting on the /media-stream WebSocket endpoint, which allows any unauthenticated attacker to open sessions that consume the server's OpenAI API credentials.

The exploitation of this flaw can lead to significant financial loss through the unauthorized depletion of OpenAI API credits. Furthermore, because the vulnerability allows for uncontrolled resource allocation, it can facilitate a denial of service, rendering the PraisonAI system unavailable to legitimate users. With a CVSS score of 7.5, this high-severity issue necessitates immediate attention to prevent operational disruption and unexpected cloud infrastructure costs.

Immediate Action: Update the PraisonAI package to version 4.5.128 or later via PyPI to implement the necessary authentication and rate-limiting controls.

Proactive Monitoring: Monitor WebSocket connection logs for high volumes of traffic or anomalous connection patterns originating from unknown or unauthorized clients.

Compensating Controls: Deploy a Web Application Firewall or WebSocket-aware proxy to restrict access to the /media-stream endpoint to trusted IP ranges until the update is applied.

Public Exploit Available: No (Exploit_available: false)

Given the ease of exploitation and the potential for direct financial impact, administrators should prioritize updating PraisonAI to version 4.5.128 immediately. Failure to patch leaves the underlying OpenAI API key exposed to unauthorized use, which can result in rapid depletion of service quotas and associated financial liabilities.