{
  "entry": {
    "kind": "vuln",
    "slug": "cve-2026-44338",
    "name": "CVE-2026-44338",
    "vendor": "praisonai",
    "description": "PraisonAI's legacy API server ships with authentication disabled by default, allowing anyone on the network to hijack autonomous agent runs, execute arbitrary tasks, and drain expensive LLM API quotas without presenting credentials. The flaw was actively exploited within hours of public disclosure, with attackers targeting both internet-exposed instances and lateral-movement opportunities inside cloud VPCs. Patched in PraisonAI 4.6.34.",
    "website": "https://cybersecuritynews.com/praisonai-vulnerability-exploited/",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": {
      "manager": "unknown",
      "packageName": "praisonai",
      "command": null
    },
    "configFiles": null,
    "category": "package",
    "updatedAt": "2026-05-09",
    "risk": {
      "score": 90,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "CVE-2026-44338",
      "aliases": [
        "ti-021"
      ],
      "title": "CVE-2026-44338: PraisonAI Authentication Disabled by Default, Exploited Within Hours",
      "summary": "PraisonAI's legacy API server ships with authentication disabled by default, allowing anyone on the network to hijack autonomous agent runs, execute arbitrary tasks, and drain expensive LLM API quotas without presenting credentials. The flaw was actively exploited within hours of public disclosure, with attackers targeting both internet-exposed instances and lateral-movement opportunities inside cloud VPCs. Patched in PraisonAI 4.6.34.",
      "severity": "critical",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Authentication bypass"
      ],
      "componentType": "package",
      "component": {
        "name": "praisonai",
        "vendor": null,
        "package": "praisonai",
        "ecosystem": null,
        "catalogSlug": null
      },
      "affected": [
        {
          "range": "<4.6.34",
          "fixed": "4.6.34"
        }
      ],
      "exploited": true,
      "exploitPublic": false,
      "publishedAt": "2026-05-09",
      "modifiedAt": "2026-05-09",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://cybersecuritynews.com/praisonai-vulnerability-exploited/"
        },
        {
          "type": "cve",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44338"
        }
      ],
      "mitigation": "Upgrade PraisonAI to 4.6.34+ immediately. Audit any PraisonAI instance for unexpected agent runs since May 9. Rotate LLM API keys configured in PraisonAI. Enable authentication on all PraisonAI deployments and restrict to internal networks only.",
      "detectedByAnomity": false
    }
  }
}