PraisonAI - Authentication Bypass Detection

PraisonAI 2.5.6 to 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server. !/usr/bin/env python3 -- coding: utf-8 --...