High severity7.3NVD Advisory· Published May 8, 2026· Updated May 8, 2026
CVE-2026-44338
CVE-2026-44338
Description
PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. This issue has been patched in version 4.6.34.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
PraisonAIPyPI | >= 2.5.6, < 4.6.34 | 4.6.34 |
Affected products
2Patches
Vulnerability mechanics
References
3- github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6rmh-7xcm-cpxjnvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-6rmh-7xcm-cpxjghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-44338ghsaADVISORY
News mentions
4- PraisonAI: 19 Critical and High-Severity CVEs Disclosed in Single-Day Security DumpVypr Intelligence · May 29, 2026
- ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and MoreThe Hacker News · May 18, 2026
- PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of DisclosureThe Hacker News · May 14, 2026
- Hackers Targeted PraisonAI Vulnerability Hours After DisclosureSecurityWeek · May 14, 2026