CVE-2026-34953

Vulnerability: PraisonAI OAuthManager.validate_token() bug allows unauthenticated access. If a token is not in the internal store (which is empty by default), the current implementation falls through and returns True, granting full access to MCP server tools. Impact: attacker can call all registe...