CVE-2026-34952：PraisonAI Gateway未授权访问漏洞

PraisonAI Gateway 中的 CVE-2026-34952 允许未经身份验证的攻击者访问敏感信息并可能执行任意代码。/ws 和 /info 端点缺乏身份验证，允许任何网络客户端连接、枚举注册的代理并向这些代理及其工具集发送任意消息。这可能导致数据泄露、自动化流程的操纵，甚至系统被破坏，具体取决于代理的权限和功能。CVSS 分数为 9.1，表明存在关键风险，需要立即关注。

Organizations deploying PraisonAI Gateway in environments with limited network segmentation are particularly at risk. Shared hosting environments or deployments where the Gateway is directly exposed to the internet are also highly vulnerable. Legacy configurations that haven't been regularly updated are also susceptible.

• python / server: Monitor PraisonAI Gateway logs for unauthorized WebSocket connections and requests to /info. Use journalctl -u praisonai to filter for relevant events. • generic web: Use curl -I <gateway_ip>/info to check if the endpoint returns agent information without authentication. • generic web: Monitor network traffic for unusual WebSocket connections to the PraisonAI Gateway on port 80 or 443. • generic web: Check access logs for requests to /ws and /info originating from unexpected IP addresses.

1. 2026-04-01Disclosure

   disclosure

1. 已保留2026-03-31
2. 发布日期2026-04-01
3. 修改日期2026-04-06
4. EPSS 更新日期2026-04-11

针对 CVE-2026-34952 的主要缓解措施是将 PraisonAI Gateway 更新到 4.5.97 或更高版本。此版本包含安全修复程序，这些修复程序实现了对访问 /ws 和 /info 端点所需的身份验证。同时，作为临时措施，请限制 PraisonAI Gateway 运行的网络访问，仅限于可信来源。主动监控服务器日志以查找未经授权的连接也可以帮助检测和响应潜在攻击。考虑使用 Web 应用程序防火墙 (WAF) 来阻止恶意流量。