PraisonAI CVE-2026-44338: Flask API Server Auth Bypass by Default

Vulnerability Overview Vulnerability Name: PraisonAI Flask server with authentication disabled by default CVE ID: CVE-2026-44338 CVSS Score: 9.8 / 10 Description: PraisonAI provides a code generator, , which creates a Flask API server with authentication disabled by default. Users following the quick-start guide in the documentation generate a server that: Binds to 0.0.0.0:80, exposing and endpoints. Runs on user-provided JSON input, embedding API key material within the LLM orchestration process. Requires no authentication. Affected Versions Affected Versions: = 4.6.40 Vulnerability Details: Vulnerable Version: on PyPI. Default Configuration: in defaults to . Generator Code: The function in generates code where defaults to . CLI Entry: The server generated by the command has authentication disabled by default. Remediation Fixed Versions: >= 4.6.40 Remediation Method: Change the default value of to in , and update the default value of accordingly in . POC Code Impact Operators running will obtain a network-reachable Flask server that invokes when the attacker's LLM API key is present in the process environment. Attackers can access arbitrary LLM orchestration, including any tools generated by agents, within which PraisonAI typically includes , , , and HTTP requests, as well as the operator's LLM API key. Current Status CVE-2026-44338 has been submitted and categorized. Reality: is the latest version on PyPI as of 2026-05-16. The generator defaults to . Gap: The CVE acknowledges the fix exists. The fix is optional. The default configuration generator remains vulnerable. Parent CVE CVE-2026-44338 / GHSA-6mth-7xcm-gpx CVSS: 3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Goal Reached Thanks to every supporter — we hit 100%!

PraisonAI CVE-2026-44338: Flask API Server Auth Bypass by Default

More from this source