CVE-2026-44338 describes a missing authentication vulnerability in the legacy Flask API server shipped with PraisonAI versions 2.5.6 through 4.6.33. The server’s authentication is disabled by default, enabling any remote unauthenticated user to access the /agents endpoint and invoke configured workflows through /chat. This flaw violates secure access controls for critical functions, allowing potential unauthorized read and write operations. The vulnerability has a CVSS 3.1 base score of 7.3, reflecting high severity due to network attack vector, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. The vendor patched this issue in version 4.6.34.

An attacker who can reach the legacy Flask API server can access sensitive agent information and trigger workflows without authentication. This can lead to unauthorized disclosure of information, unauthorized modification of workflows, and potential disruption of service. The vulnerability affects confidentiality, integrity, and availability of the PraisonAI system. There are no known exploits in the wild at this time.

Upgrade PraisonAI to version 4.6.34 or later, where this authentication issue has been fixed. Since this is not a cloud service, remediation requires applying the official patch by updating the product. Until the upgrade, restrict network access to the legacy Flask API server to trusted users only to mitigate unauthorized access.