CVE-2026-55533 is a fail-open authentication bug in the PraisonAI Recipe server: selecting api-key or jwt without supplying the matching secret leaves every recipe endpoint open, and the CLI safety check for non-localhost binding never notices.
POST /forgot-password embeds the supplied username in an internal REST path without canonicalizing it first. Traversal segments and a URL fragment redirect the backend request to the administrator's passwordResetToken field.
Encoded query delimiters alter the internal reset API parameter set, exposing a path to retrieve the administrator reset token.
The product page uses GET /api/products/1/price, yet the same route also accepts an undocumented PATCH request. Setting the price to zero lets an ordinary account buy the jacket without paying its intended cost.
The checkout API returns an internal discount property and also accepts that property from client-supplied JSON. Submitting a 100% discount reduces the jacket order to zero and bypasses the intended price control.
Interactive documentation at /api discloses the request needed to delete a user. The backend accepts that operation from the ordinary wiener account, allowing it to delete carlos without adequate authorization.