CVE-2026-61436 MervinPraison CVE debrief

Who should care

Defenders who use PraisonAI's AgentMail webhook mode should assess their exposure and verify webhook signature verification to prevent potential attacks. This includes operators of PraisonAI's AgentMail webhook mode, platform administrators, vulnerability management teams, and security teams who need to prioritize verifying webhook signature verification in PraisonAI's AgentMail webhook mode and ensure that the AGENTMAIL_WEBHOOK_SECRET is properly stored

Why it matters

CVE-2026-61436 is a vulnerability in PraisonAI's AgentMail webhook mode that allows forged unsigned message.received events to be accepted and agents to be invoked. Defenders should prioritize verifying webhook signature verification to prevent potential attacks.

• Defenders need to verify webhook signature verification to prevent potential attacks
• The vulnerability allows forged unsigned message.received events to be accepted and agents to be invoked
• The issue arises from the lack of verification of AgentMail's Svix webhook signatures
• Defenders should prioritize verifying webhook signature verification in PraisonAI's AgentMail webhook mode

Technical summary

The vulnerability in PraisonAI's AgentMail webhook mode allows forged unsigned message.received events to be accepted and agents to be invoked. This is due to the lack of verification of AgentMail's Svix webhook signatures. The affected boundary is webhook authenticity. The issue arises from the lack of verification of AgentMail's Svix webhook signatures, which are typically delivered through Svix and include svix-id, svix-timestamp, and svix-signature headers. Receivers are expected to verify the raw request body with the endpoint signing secret, commonly stored as AGENTMAIL_WEBHOOK_SECRET, before trusting the event body.

Defensive priority

Defenders should prioritize verifying webhook signature verification in PraisonAI's AgentMail webhook mode and ensure that the AGENTMAIL_WEBHOOK_SECRET is properly stored and used.

Recommended defensive actions

• Verify webhook signature verification in PraisonAI's AgentMail webhook mode
• Ensure that the AGENTMAIL_WEBHOOK_SECRET is properly stored and used
• Review and update PraisonAI to version 4.6.78 or later
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The evidence for this vulnerability comes from the PraisonAI source code and the OSV vulnerability database. The issue is related to the lack of verification of webhook signatures in AgentMail webhook mode.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.