CVE-2026-44338: PraisonAI is a multi-agent teams system

This week

HIGH 7.3REMOTEUPGRADE

CVE-2026-44338 is a high-severity flaw (CVSS 7.3) affecting praisonai. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. This issue has been patched in version 4.6.34.

Why this priority

High severity
EPSS top 2%: very likely to be exploited
Public exploit reference
Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score	7.3 (High)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	32.6% (top 2%)
CISA exploited list	No
Weakness	CWE-306, CWE-668, CWE-1188
Published	2026-05-08
Last modified	2026-06-17

Publisher (CNA): GitHub, Inc. · Vendor: praison

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2026-05-08 14:16 UTCPublished CVE record published
2026-06-17 10:50 UTCUpdated Record last modified

praison praisonai UPGRADE

Affected: >= 2.5.6 and < 4.6.34

Fixed in: 4.6.34

Safe to downgrade to: a release before 2.5.6

1. Check installed version

apt-cache policy praisonai || rpm -q praisonai || praisonai --version

2. UPGRADE to 4.6.34 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade praisonai

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade praisonai

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 2.5.6 (Debian / Ubuntu)

apt-cache madison praisonai sudo apt install praisonai=<VERSION_BEFORE_2.5.6> sudo apt-mark hold praisonai

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list praisonai sudo dnf downgrade praisonai-<VERSION_BEFORE_2.5.6> sudo dnf versionlock add praisonai

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Exact fixes by distribution

Python (pip) · PraisonAI · FIXED · 4.6.34 · vulnerable: >= 2.5.6, <= 4.6.33 · source

pip install --upgrade "PraisonAI>=4.6.34" pip show PraisonAI

Fedora 46 · fzssh · FIXED · 1.4.0-2.fc46 · FEDORA-2026-8004fcd067 · source

sudo dnf upgrade --advisory=FEDORA-2026-8004fcd067

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

GitHub PoC: HORKimhab/CVE-2026-44338 (0 stars)
GitHub PoC: rootdirective-sec/CVE-2026-44338-Lab (0 stars)
Write-up: github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6rmh-7xcm-cpxj
Nuclei scan template: PraisonAI - Authentication Bypass

Advisories and coverage

Research and news

Sysdig Threat Research: CVE-2026-44338: PraisonAI authentication bypass in under 4 hours and the growing trend of rapid exploitation 2026-05-12

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-44338?

praisonai: upgrade to 4.6.34. Exact commands for each OS are on this page.

Is CVE-2026-44338 being exploited?

CVE-2026-44338 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-44338 affect?

CVE-2026-44338 affects praisonai. Severity is high (CVSS 7.3). PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agen

How urgent is CVE-2026-44338?

Priority 60/100. High severity; EPSS top 2%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action

Software pages

Flask vulnerabilities

Related CVEs

CVE-2026-40288 CRITICAL 9.8 UPGRADE UPGRADE PraisonAI is a multi-agent teams system
CVE-2026-40289 CRITICAL 9.1 UPGRADE UPGRADE PraisonAI is a multi-agent teams system
CVE-2026-40315 CRITICAL 9.8 UPGRADE PraisonAI is a multi-agent teams system
CVE-2026-40116 HIGH 7.5 UPGRADE PraisonAI is a multi-agent teams system
CVE-2026-40113 HIGH 8.4 UPGRADE PraisonAI is a multi-agent teams system

References

← Back to latest CVEs