A newly disclosed authentication bypass flaw (CVE-2026-44338) in PraisonAI drew near-instant probing, exposing risks from default-insecure AI APIs.

CSO Online offers insights into cybersecurity, risk management, and IT leadership, providing articles, reports, and expert analysis to help security professionals navigate the evolving threat landscape and protect their organizations from cyber attacks. By exploring CSO Online's curated content, CISOs, security managers, and IT executives can learn about threat intelligence, security frameworks, and incident response strategies for building resilient cybersecurity programs. Whether you're defending against ransomware, phishing attacks, or insider threats, CSO Online offers resources to strengthen your security posture and safeguard your digital assets.

CSO Online

A critical authentication bypass vulnerability (CVE-2026-44338) in PraisonAI, an open-source AI orchestration framework, was actively scanned by attackers less than four hours after public disclosure. The flaw stems from a legacy Flask-based API server that ships with authentication disabled by default (AUTH_ENABLED = False), affecting versions 2.5.6 to 4.6.33. Any internet-reachable instance allowed unauthenticated access to agent workflows. Sysdig observed targeted scanning of PraisonAI-specific endpoints including /api/agents and /api/agents/config shortly after the GitHub advisory was published. The fix is available in version 4.6.34. Defenders are advised to upgrade immediately, discontinue the legacy api_server.py entrypoint, and monitor for the CVE-Detector/1.0 user-agent string.

PraisonAI vulnerability gets scanned within 4 hours of disclosure