CVE-2026-44338: PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

May 11, 2026

PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token.

References

github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6rmh-7xcm-cpxj
github.com/advisories/GHSA-6rmh-7xcm-cpxj
nvd.nist.gov/vuln/detail/CVE-2026-44338

Code Behaviors & Features

Detect and mitigate CVE-2026-44338 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →