7.3 HighCWE-306
CVE-2026-44338
MervinPraison PraisonAI vulnerability
MervinPraisonPraisonAI
Status
- Not in CISA KEV
- Fixed in version 4.6.34
Exploit probabilityEPSSchecked 25 Oct
0.8%probability of exploitation in the next 30 days
Higher than 57% of scored CVEs
SeverityCVSS
7.3High
Description NVD
PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. This issue has been patched in version 4.6.34.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 14 May · 09:50 UTC | SecurityWeek | PraisonAI auth bug exploited hours after CVE-2026-44338 reveal |
| Thu 14 May · 12:30 UTC | The Hacker News | PraisonAI flaw exploited hours after CVE-2026-44338 disclosure |
- PraisonAI flaw exploited hours after CVE-2026-44338 disclosureThe Hacker News
- PraisonAI auth bug exploited hours after CVE-2026-44338 revealSecurityWeek · first in our coverage