Tag

CVE-2026-44338

1 brief RSS

PraisonAI Legacy API Server Authentication Bypass (CVE-2026-44338)

PraisonAI ships a legacy Flask API server with authentication disabled by default, allowing any reachable caller to access `/agents` and trigger the configured `agents.yaml` workflow through `/chat` without providing a token (CVE-2026-44338).

PraisonAI authentication bypass API CVE-2026-44338

2r 1t 1c 1h ago