CVE-2026-47393
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-generator (praisonai.deploy.api.generate_api_server_code) that emits a Flask API server with authentication disabled by default. Users who follow the documented quickstart (praisonai deploy --type api) get a server that binds to 0.0.0.0 per the recommended sample YAML, exposes /chat and /agents endpoints, runs praisonai.run() on user-supplied JSON input — LLM orchestration with the API key materials present in the process environment, and does not require any authentication. Versions prior to 4.6.40 still ship the generator with auth_enabled defaulting to False. The fix shape is opt-in via APIConfig(auth_enabled=True, auth_token=...). Version 4.6.40 fixes the issue.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MervinPraison | PraisonAI | < 4.6.40 | affected |
Weaknesses
- CWE-306: CWE-306: Missing Authentication for Critical Function
- CWE-1188: CWE-1188: Insecure Default Initialization of Resource
References
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8444-4fhq-fxpq
- https://github.com/MervinPraison/PraisonAI/pull/1685
- https://github.com/MervinPraison/PraisonAI/commit/ef79b7a0561796ad9807f0f09538c25cc78d3619
- https://github.com/advisories/GHSA-6rmh-7xcm-cpxj
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.