Lucene search
+L

8 matches found

Kitploit
Kitploit
•added 2026/10/04 4:53 a.m.•13 views

cua-kit

CUA-Kit A toolkit for enumerating and interacting with computer use agents on Windows and macOS systems. Tools Tool| Description| Outputs ---|---|--- cua-enum| Enumerate computer use agent configurations Claude Code, Codex CLI, Cursor, Gemini CLI| .exe, .x64.o cua-exec| Execute computer use agent...

6.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/04/06 10:57 a.m.•12 views

CVE-2026-34952

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS5.9AI score0.00517EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/04/03 10:53 p.m.•35 views

CVE-2026-34952 PraisonAI: Missing Authentication in WebSocket Gateway

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS0.00517EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/04/03 10:53 p.m.•3 views

CVE-2026-34952

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS5.9AI score0.00517EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/04/03 10:53 p.m.•15 views

CVE-2026-34952 PraisonAI: Missing Authentication in WebSocket Gateway

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and the...

9.1CVSS6AI score
SaveExploits0References3
OSV
OSV
•added 2026/04/01 11:28 p.m.•11 views

GHSA-CFH6-VR3J-QC3G PraisonAI Has Missing Authentication in WebSocket Gateway

Summary The PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. Details gateway/server.py:242 source -...

9.1CVSS6AI score0.00517EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2026/04/01 11:28 p.m.•20 views

PraisonAI Has Missing Authentication in WebSocket Gateway

Summary The PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. Details gateway/server.py:242 source -...

9.1CVSS6.2AI score0.00517EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/01 12:00 a.m.•17 views

PT-2026-29828

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.87 Description The PraisonAI Gateway server lacks authentication for WebSocket connections at the /ws endpoint and exposes agent topology at the /info endpoint without authentication. This allows any network...

9.1CVSS6.1AI score0.00517EPSS
SaveExploits1References15
Rows per page
Query Builder