PraisonAI - Authentication Bypass

PraisonAI 2.5.6 to 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server. id: CVE-2026-44338 info: name: PraisonAI -...

signalops

Signal OPS 보안 연구 및 교육을 위한 전 스펙트럼, 전 소스 신호 정보 융합 플랫폼입니다. Signal OPS는 수십 개의 공개 수집 소스WiFi/Bluetooth/기지국 데이터베이스, 인터넷 노출 스캐너, 카메라 인덱스, ADS-B 항공편 피드, 위성 TLE 추적, SDR/APRS 네트워크를 하나의 전술 지도와 Flask API로 통합하여 RF, 셀룰러, 항공, 궤도, 감시 영역을 하나의 실시간 작전 상황으로 상호 연관시키며, 선택적으로 AI 지원 위협 요약을 추가로 제공합니다. 기능 통합 RF/OSINT 스캔 — ...

DevHub-HTB-Walkthrough

DevHub – HTB 워크스루 Medium Linux 머신: DevHub 난이도: Medium OS: Linux 주제: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root 권한 상승 📌 1. 정찰 nmap -sC -sV devhub.htb 결과: Port 22 SSH Port 80 HTTP Port 6274 MCPJam Inspector 📌 2. Hosts 파일 수정 echo "10.x.x.x devhub.htb" /etc/hosts 📌 3. 웹사이트 탐색...

cybermeowfia-termux

CyberMeowfia Termux Root Manager Утилита для повышения привилегий в Termux и менеджер root-прав на основе уязвимости ядра CVE-2026-43501. Возможности Эксплойт уязвимости ядра CVE-2026-43501 Веб-интерфейс управления на Flask 25 API Аутентификация по токену HMAC-SHA256 Управление процессами, доступ...

CVE-2026-44338-Lab

CVE-2026-44338 Лаборатория обхода аутентификации PraisonAI Локальная Docker-лаборатория для CVE-2026-44338 — обхода аутентификации в устаревшем Flask API сервере PraisonAI. Данная лаборатория демонстрирует состояние неаутентифицированного доступа на устаревших маршрутах API. Она намеренно...

bola-CVE-2023-27524

bola-CVE-2023-27524 📄 README.md — BOLA CVE-2023-27524 데모 프로젝트 🔐 객체 수준 인증 위반BOLA 데모 CVE-2023-27524 보안 분석 및 수정 --- 📌 프로젝트 개요 이 프로젝트는 Flask 기반 API를 사용하여 실제 객체 수준 인증 위반BOLA 취약점과 그에 대한 안전한 수정 방법을 보여줍니다. 이 취약점은 CVE-2023-27524를 모델로 하며, 공격자가 API 요청에서 객체 식별자ID를 수정하여 승인되지 않은 객체에 접근하거나 조작할 수 있도록 하는 부적절한 인증...

CVE-2026-71241 Book-Management-System - Unauthenticated Disclosure of Student PII and Borrowing History

Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...

CVE-2026-71241 Book-Management-System - Unauthenticated Disclosure of Student PII and Borrowing History

Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...

CVE-2026-71241

Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. This allows any unauthenticated remote user to retrieve student PII name,...

CVE-2026-71241: Missing Authentication for Critical Function

Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...

CVE-2026-47393

PraisonAI is a multi-agent teams system. CVE-2026-44338 GHSA-6rmh-7xcm-cpxj documents that PraisonAI ships a code-generator praisonai.deploy.api.generateapiservercode that emits a Flask API server with authentication disabled by default. Users who follow the documented quickstart praisonai deploy...

EUVD-2026-46297

PraisonAI is a multi-agent teams system. CVE-2026-44338 GHSA-6rmh-7xcm-cpxj documents that PraisonAI ships a code-generator praisonai.deploy.api.generateapiservercode that emits a Flask API server with authentication disabled by default. Users who follow the documented quickstart praisonai deploy...

CVE-2026-47393: Missing Authentication for Critical Function

PraisonAI is a multi-agent teams system. CVE-2026-44338 GHSA-6rmh-7xcm-cpxj documents that PraisonAI ships a code-generator praisonai.deploy.api.generateapiservercode that emits a Flask API server with authentication disabled by default. Users who follow the documented quickstart praisonai deploy...

PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

SummaryPraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. DetailsThe vulnerable server is the shipped...

PYSEC-2026-2904 PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

Summary PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. Details The vulnerable server is the shippe...

PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)

SummaryThe Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The sanitizehtml function relies on the nh3 library, which is not listed as a required or optional dependency in pyproject.toml. When nh3 is absent the default installation, the...

PT-2026-59681

Summary Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port TCP 24282, hardcoded as 0x5EDA in constants.py. The server has no authentication, no CSRF protection, and no Host header validation. A DNS rebinding attack allows a malicious webpage to reach...

PT-2026-59541

Summary PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. Details The vulnerable server is the shippe...

PT-2026-59545

Summary The Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The sanitize html function relies on the nh3 library, which is not listed as a required or optional dependency in pyproject.toml. When nh3 is absent the default installation, the...

CVE-2026-49471

Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port, with no authentication, no CSRF protection, and no Host header validation. A D...