UNKNOWNCVE-2026-34952
PraisonAI: Missing Authentication in WebSocket Gateway
Platform
other
Component
praisonai
Fixed in
4.5.97
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.
How to fix
Actualice PraisonAI a la versión 4.5.97 o superior. Esta versión corrige la falta de autenticación en el gateway WebSocket, impidiendo el acceso no autorizado a la información de los agentes y el envío de mensajes arbitrarios.
Monitor your dependencies automatically
Get notified when new vulnerabilities affect your projects. Free forever.
Start free