Praison AI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

Summary: PraisonAI's legacy Flask API server hard-codes AUTH_ENABLED = False and AUTH_TOKEN = None, leaving endpoints like /agents and /chat reachable without a token in all versions from 2.5.6 through 4.6.33; CVE-2026-44338 carries a CVSS score of 7.3 and is patched in 4.6.34. Sysdig reported that a scanner identifying itself as CVE-Detector/1.0 from IP 146.190.133[.]49 probed the vulnerable endpoint three hours and 44 minutes after the advisory went public on May 11, 2026 at 13:56 UTC, with the first targeted request at 17:40 UTC.
What's compelling: The scanner confirmed the bypass with a single unauthenticated GET /agents returning 200 OK, and it had not yet sent a POST to /chat - meaning the check for exploitability came before any attempt to trigger the agents.yaml workflow. Sysdig's operating assumption is that for any project shipping an unauthenticated default, the window between disclosure and active exploitation is measured in single-digit hours.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-44338
Related: ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026