CVE-2026-34953CWE-863

PraisonAI: Authentication Bypass in OAuthManager.validate_token()

Critical · published April 3, 2026

CVSS v3.1
9.1
EPSS
0%
Percentile
35.0
In the wild
Unconfirmed
What it is

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.0th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-04-03T22:54Z
EPSS history
Timeline
  • 03 APR 22:54Z
    PraisonAI: Authentication Bypass in OAuthManager.validate_token()
    cvelistv5