CVE-2026-44338CWE-1188CWE-306CWE-668

PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

High · published May 8, 2026

CVSS v3.1
7.3
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. This issue has been patched in version 4.6.34.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00823 · 56.9th percentile
Weaknesses
CWE-1188 · Initialization of a Resource with an Insecure Default; CWE-306 · Missing Authentication for Critical Function; CWE-668 · Exposure of Resource to Wrong Sphere
Published
2026-05-08T13:35Z
EPSS history
Timeline
  • 25 SEP 03:26Z
    EPSS moved 29% → 1%
    epss
  • 08 MAY 13:35Z
    PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution
    cvelistv5