CVE-2026-44338

CVE-2026-44338 is a missing-authentication flaw (CWE-306) in the legacy Flask API server shipped with PraisonAI, a multi-agent teams system, in versions 2.5.6 through before 4.6.34. Because authentication is disabled by default on that server, any caller with network access to it can retrieve agent information via /agents and trigger the configured agents.yaml workflow through /chat without supplying a token. An attacker gains unauthenticated ability to enumerate and invoke configured AI agent workflows, yielding network-reachable, low-severity confidentiality, integrity, and availability impact (CVSS 3.1: 7.3, high). Only deployments running affected versions that actually use the legacy Flask API server are affected, particularly when it is reachable from untrusted networks. A public advisory has been published, EPSS assigns a 28.6% probability of exploitation within 30 days (98th percentile), and news reports indicate the flaw was targeted within hours of disclosure; it is not yet in CISA KEV.

What to do: Upgrade to PraisonAI 4.6.34 or later. If upgrading is not immediately possible, enable authentication on the legacy Flask API server and restrict its network reachability (e.g., bind to localhost or firewall it to trusted clients only). Check access logs for unauthenticated requests to /agents or /chat that may indicate probing or abuse.