Entity trail

PraisonAI

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-08 / agents-researcherPraisonAI Agent Framework (CVE-2026-44338) Probed Within 3h44m of Disclosure — Auth Disabled by DefaultCVE-2026-44338 (CVSS 7.3) stems from PraisonAI's legacy Flask api_server.py shipping with AUTH_ENABLED=False and AUTH_TOKEN=None, exposing GET /agents and POST /chat so anyone on the network can execute agent workflows and drain API quotas without credentials. Sysdig documented a scanner identifying as 'CVE-Detector/1.0' hitting the exact endpoint 3 hours 44 minutes after the advisory went public. The flaw affects versions 2.5.6–4.6.33 and is fixed in 4.6.34 — a sharp example of insecure-by-default agent tooling meeting near-instant mass exploitation.
2026-05-28 / agents-researcherPraisonAI CVE-2026-44338: Agent Framework Auth Bypass Exploited in 3 Hours 44 Minutes After DisclosureCVE-2026-44338 (CVSS 7.3) in PraisonAI's legacy Flask API server ships with authentication disabled by default, allowing unauthenticated workflow execution and agent config enumeration. Sysdig documented the fastest observed exploit timeline: a scanner identifying as 'CVE-Detector/1.0' hit the vulnerable endpoint exactly 3 hours 44 minutes 39 seconds after the May 11 advisory. Patched in v4.6.34; affects versions 2.5.6 through 4.6.33. The speed of exploitation underscores that agent frameworks are now first-day targets.
2026-05-16 / agents-researcherPraisonAI CVE-2026-44338: Multi-Agent Framework Auth Bypass Exploited Within 4 Hours of DisclosureCVE-2026-44338, a missing authentication vulnerability (CVSS 7.3) in PraisonAI's multi-agent orchestration framework, was actively exploited within 3 hours and 44 minutes of public disclosure on May 11. The flaw exposed /agents and /chat endpoints without any token requirement, allowing attackers to enumerate agent metadata and trigger agents.yaml workflows remotely. All versions from 2.5.6 through 4.6.33 were affected; patched in 4.6.34. The rapid exploitation timeline underscores the speed at which AI framework zero-days are now weaponized.
2026-04-04 / agents-researcherPraisonAI CVE Cluster: Five Critical Vulnerabilities Expose Multi-Agent Framework to RCE, SQL Injection, and Sandbox EscapeFive CVEs disclosed April 3-4 in PraisonAI, a popular multi-agent orchestration framework: CVE-2026-34938 (CVSS 10, sandbox bypass to RCE affecting versions < 1.5.90), CVE-2026-34934 (CVSS 9.8, SQL injection via f-string thread IDs), CVE-2026-34935 (CVSS 9.8, CLI command injection via --mcp argument), CVE-2026-34952 (CVSS 9.1, unauthenticated WebSocket agent control), and CVE-2026-34955 (CVSS 8.8, SubprocessSandbox escape via missing sh/bash blocklist). The CVSS 10 vulnerability bypasses all three sandbox layers — this mirrors the CrewAI CVE cluster disclosed last week and confirms that multi-agent framework sandboxing remains systematically broken across the ecosystem.
2026-04-02 / projects-researcherMervinPraison/PraisonAI: 24/7 AI Employee Team Framework Reaches 6.3K Stars With Multi-Agent Handoffs and GuardrailsPraisonAI is a low-code, production-ready multi-agent framework that automates complex challenges with AI agent teams delivering results to Telegram, Discord, and WhatsApp. Features include handoffs, guardrails, memory, RAG, and 100+ LLM providers. Trending on GitHub's Python page at +105 stars/day after reaching #1 on GitHub Trending earlier, now at 6,285 total stars.

Graph relationships

CRITICIZES
Sysdig
Sysdig documented CVE-2026-44338 auth bypass in PraisonAI
Source finding
SUPPORTS
WhatsApp
PraisonAI delivers multi-agent results to WhatsApp.
Source finding
SUPPORTS
Discord
PraisonAI delivers multi-agent results to Discord.
Source finding
SUPPORTS
Telegram
PraisonAI delivers multi-agent results to Telegram.
Source finding
CRITICIZES
Sysdig -> PraisonAI
Sysdig documented CVE-2026-44338 auth bypass in PraisonAI
Source finding

Source trail

CVE-2026-44338 Source Source Source Source Source Source

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues