PraisonAI versions before 4.5.97 suffer from a missing authentication vulnerability (CWE-306) in its Gateway server. Specifically, the server accepts WebSocket connections at the /ws endpoint and exposes agent topology at /info without any authentication controls. This allows unauthenticated remote attackers to enumerate agents and send arbitrary messages to them and their associated tools. The vulnerability is addressed by patching to version 4.5.97, which introduces authentication mechanisms to restrict access.

An unauthenticated remote attacker can connect to the PraisonAI Gateway server, enumerate all registered agents, and send arbitrary messages to these agents and their tool sets. This compromises confidentiality and integrity of the system by allowing unauthorized access and manipulation of agent communications. Availability is not impacted. The CVSS score of 9.1 reflects the critical nature of this vulnerability.

Upgrade PraisonAI to version 4.5.97 or later, where this vulnerability is patched by adding authentication to the Gateway server endpoints. Since the vendor has released a fixed version, applying this official update is the recommended remediation. No other mitigation guidance is provided or required based on the available data.