PraisonAI shipped auth disabled by default. A scanner hit the vulnerable endpoint 3h44m after disclosure.

CVE-2026-44338 (CVSS 7.3) comes from PraisonAI's legacy Flask api_server.py shipping with AUTH_ENABLED=False and AUTH_TOKEN=None, exposing GET /agents and POST /chat to anyone on the network. Sysdig watched a scanner identifying as "CVE-Detector/1.0" hit the exact endpoint under four hours after the advisory dropped. Affects 2.5.6–4.6.33, fixed in 4.6.34. The lesson isn't "patch faster," it's "insecure-by-default is now exploited at machine speed." If your agent framework ships auth off, treat that as a shipped vulnerability, not a config choice.