A critical vulnerability in PraisonAI allows unauthenticated attackers to forge webhook requests and manipulate agent-based system workflows due to missing cryptographic signature verification.

The vulnerability exists in the WhatsApp and Linear bot webhook handlers, which fail to validate HMAC signatures when specific environment variables are unset. This allows an unauthenticated remote attacker to inject arbitrary events, impersonate users, and disrupt agent processing.

The ability for an attacker to impersonate platform users and influence agent prompts poses a significant risk to the integrity of automated workflows. Successful exploitation could lead to unauthorized data manipulation within linked services and the potential for malicious actors to hijack internal agent-driven processes. With a CVSS score of 8.6, this flaw represents a high-severity risk to operational continuity and data authenticity.

Immediate Action: Upgrade the PraisonAI package to version 4.6.59 or later immediately to enforce mandatory HMAC signature validation.

Proactive Monitoring: Review web server and application logs for unusual webhook traffic patterns, particularly requests lacking valid signature headers or originating from unexpected sources.

Compensating Controls: Ensure that WHATSAPP_APP_SECRET and LINEAR_WEBHOOK_SECRET are strictly configured in the environment to prevent the fallback logic that permits unsigned requests.

Public Exploit Available: No (exploit_available: unknown)

Given the high CVSS score and the ease of exploitation for unauthenticated remote actors, organizations utilizing PraisonAI must prioritize this update. Applying the patch in version 4.6.59 is the only effective way to ensure that webhook integrity is maintained and to prevent the unauthorized manipulation of agent system events.