Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.2 views

CVE-2026-34952

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS5.9AI score0.00444EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/03 10:53 p.m.0 views

CVE-2026-34952

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS5.9AI score0.00444EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/04/03 10:53 p.m.18 views

CVE-2026-34952 PraisonAI: Missing Authentication in WebSocket Gateway

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS0.00444EPSS
Exploits1References1
OSV
OSV
added 2026/04/01 11:28 p.m.2 views

GHSA-CFH6-VR3J-QC3G PraisonAI Has Missing Authentication in WebSocket Gateway

Summary The PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. Details gateway/server.py:242 source -...

9.1CVSS6AI score0.00444EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2026/04/01 11:28 p.m.6 views

PraisonAI Has Missing Authentication in WebSocket Gateway

Summary The PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. Details gateway/server.py:242 source -...

9.1CVSS6AI score0.00444EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.2 views

PT-2026-29828

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.87 Description The PraisonAI Gateway server lacks authentication for WebSocket connections at the /ws endpoint and exposes agent topology at the /info endpoint without authentication. This allows any network...

9.1CVSS6.1AI score0.00444EPSS
Exploits1References9
Rows per page
Query Builder