Lucene search
+L

6 matches found

PyPA
PyPA
•added 2026/09/10 9:44 a.m.•9 views

PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution

Summary PraisonAI's praisonai serve agents command exposes --api-key as the documented authentication control for production/external deployments, but the configured key is not enforced on the public agent invocation compatibility endpoints. An operator can start the server with --api-key and bin...

8.6CVSS5.9AI score0.00453EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder