CVE-2026-34952 in PraisonAI

Resumen (Inglés)

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

GitHub_M

Reservar

2026-03-31

Divulgación

2026-04-04

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
355253	MervinPraison PraisonAI Message ws autenticación débil	306	No está definido	Arreglo oficial	CVE-2026-34952

Fuentes

• MITRE
• NVD
• CVE Details