Description
PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. This issue has been patched in version 4.6.34.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MervinPraison | PraisonAI | >= 2.5.6, < 4.6.34 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 2 repositories
-
HORKimhab/CVE-2026-44338 ★ 0 · May 15, 2026
CVE-2026-44338
-
rootdirective-sec/CVE-2026-44338-Lab ★ 0 · May 15, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- PraisonAI - Authentication Bypass http/cves/2026/CVE-2026-44338.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | praisonai | >= 2.5.6, < 4.6.34 | 4.6.34 | GHSA-6rmh-7xcm-cpxj |