CVE-2026-44338: Praison Praisonai

High severity, CVSS 7.3. EPSS: 0.8% chance of exploitation in the next 30 days.

PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. This issue has been patched in version 4.6.34.

Affected products

• Praison Praisonai: from 2.5.6, before 4.6.34 (fixed in 4.6.34)

Published 2026-05-08. Last modified 2026-06-17.