CVE-2026-44338: PraisonAI Authentication Disabled by Default, Exploited Within Hours
CVE-2026-44338 is a critical-severity authentication bypass issue in praisonai, a package. Affected: <4.6.34. Fixed in 4.6.34. It has been exploited in the wild.
Is praisonai running on your developers' machines? Anomity inventories the AI agents, MCP servers, extensions and skills on every developer device, so you can see what this advisory touches. Detect this across your developers' devices with Anomity →
Key facts
- ID
CVE-2026-44338- Severity
- critical
- Attack type
- Authentication bypass
- Component
- praisonai · package
- Package
praisonai- Known exploited
- Yes
- Published
- Last verified
What is CVE-2026-44338?
PraisonAI's legacy API server ships with authentication disabled by default, allowing anyone on the network to hijack autonomous agent runs, execute arbitrary tasks, and drain expensive LLM API quotas without presenting credentials. The flaw was actively exploited within hours of public disclosure, with attackers targeting both internet-exposed instances and lateral-movement opportunities inside cloud VPCs. Patched in PraisonAI 4.6.34.
Affected versions
| Affected | Fixed in |
|---|---|
<4.6.34 | 4.6.34 |
Am I affected by CVE-2026-44338?
You are affected if you run praisonai <4.6.34. Versions 4.6.34 and later include the fix.
How do I fix CVE-2026-44338?
Upgrade PraisonAI to 4.6.34+ immediately. Audit any PraisonAI instance for unexpected agent runs since May 9. Rotate LLM API keys configured in PraisonAI. Enable authentication on all PraisonAI deployments and restrict to internal networks only.