CVE-2026-34953 is an incorrect authorization vulnerability (CWE-863) in MervinPraison's PraisonAI multi-agent teams system. Before version 4.5.97, the OAuthManager.validate_token() method returns true for any bearer token not found in its internal token store, which is empty by default. This flaw allows any HTTP request to the MCP server with an arbitrary bearer token to be treated as authenticated, granting unauthorized full access to all registered tools and agent capabilities. The issue is resolved in version 4.5.97.

Exploitation of this vulnerability allows an unauthenticated attacker to gain full access to all registered tools and agent capabilities on the MCP server by presenting any arbitrary bearer token. This leads to a complete compromise of the affected PraisonAI system's authorization controls, potentially allowing unauthorized actions and data access. There are no known exploits in the wild at this time.

Upgrade PraisonAI to version 4.5.97 or later, where this authorization flaw has been patched. Since this is a product vulnerability and not a cloud service, remediation requires applying the official update from the vendor. Patch status is confirmed by the vendor advisory stating the issue is fixed in version 4.5.97.