CVE-2026-44338 PoC — PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated work

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/cve-2026-44338.yaml

Associated Vulnerability

Title: PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution (CVE-2026-44338)
Description:PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. This issue has been patched in version 4.6.34.

Description

PraisonAI 2.5.6 to < 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →