CVE-2026-56836 PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard

The PraisonAI multi-agent system (versions 4.5.112 through 4.6.58 ) contains a vulnerability where the deprecated Typer recipe serve command bypasses non-localhost authentication guards. Because the command fails to set the auth configuration, the create_app() function does not attach required AP...