2026-05-15 · 2026-Q2
PraisonAI Auth-Disabled API Server (CVE-2026-44338)
PrimaryL6Identity / Run
- Fixable:
- Yes, vendor patch
- Vendor response:
- Patched
- In the wild:
- Yes
- Actor:
- Attacker
Target
PraisonAI legacy Flask API server, before 4.6.34
Impact
Unauthenticated attackers enumerate configured agents via `GET /agents`, trigger workflows via `POST /chat`, extract sensitive output, and exhaust costly model quotas; exploited within hours of disclosure
Root Cause
Hardcoded insecure defaults (`AUTH_ENABLED = False`, `AUTH_TOKEN = None`) with the server bound to `0.0.0.0:8080` and a `check_auth()` that fails open when auth is disabled