PT-2026-31456

PraisonAI is a multi-agent teams system. Prior to 4.5.115, the A2U Agent-to-User event stream server in PraisonAI exposes all agent activity without authentication. The create a2u routes function registers the following endpoints with NO authentication checks: /a2u/info, /a2u/subscribe,...