PraisonAI AgentMail webhook signature verification bypass

PraisonAI's AgentMail bot in webhook mode fails to verify Svix webhook signatures, allowing unauthenticated attackers to inject forged messages into agents and spoof sender addresses. The vulnerability affects version 4.6.63 and allows arbitrary message injection and reply redirection.

Disclosed 7 October 2026 · Record updated 7 October 2026

Impact

Unauthenticated attackers can forge message.received webhook events, inject arbitrary content into agent sessions, bypass sender allow/block lists, and redirect agent replies to attacker-controlled addresses.

Our coverage

A mail slot in an unguarded door accepts envelopes from any hand without checking the sender's seal, allowing forged letters to flood the inbox unchallenged.

Vulnerabilities

PraisonAI email bot accepts forged webhooks, advisories say

Two GitHub advisories published on 7 October 2026 say PraisonAI's AgentMail bot skips webhook signature checks, letting anyone inject messages and spoof senders.

7 Oct 2026

Sources

github.comhttps://github.com/advisories/GHSA-qj9c-59p6-8cgx
github.comhttps://github.com/advisories/GHSA-7c92-x8vg-4258