# CVE-2026-44338: CVE-2026-44338: PraisonAI Authentication Disabled by Default, Exploited Within Hours

> CVE-2026-44338 is a critical-severity authentication bypass issue in praisonai, a package. Affected: <4.6.34. Fixed in 4.6.34. It has been exploited in the wild.

- **Canonical URL:** https://catalog.anomity.ai/vuln/cve-2026-44338
- **Aliases:** ti-021
- **Severity:** critical
- **Attack type:** Authentication bypass
- **Component:** praisonai (package)
- **Package:** praisonai
- **Exploited in the wild:** yes
- **Published:** 2026-05-09
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/cve-2026-44338

## Summary

PraisonAI's legacy API server ships with authentication disabled by default, allowing anyone on the network to hijack autonomous agent runs, execute arbitrary tasks, and drain expensive LLM API quotas without presenting credentials. The flaw was actively exploited within hours of public disclosure, with attackers targeting both internet-exposed instances and lateral-movement opportunities inside cloud VPCs. Patched in PraisonAI 4.6.34.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| <4.6.34 | 4.6.34 |

## Am I affected by CVE-2026-44338?

You are affected if you run praisonai <4.6.34. Versions 4.6.34 and later include the fix.

## How do I fix CVE-2026-44338?

Upgrade PraisonAI to 4.6.34+ immediately. Audit any PraisonAI instance for unexpected agent runs since May 9. Rotate LLM API keys configured in PraisonAI. Enable authentication on all PraisonAI deployments and restrict to internal networks only.

## References

- article: https://cybersecuritynews.com/praisonai-vulnerability-exploited/
- cve: https://nvd.nist.gov/vuln/detail/CVE-2026-44338

## Related vulnerabilities

- [GHSA-rqfc-q7j9-5v59](https://catalog.anomity.ai/vuln/ghsa-rqfc-q7j9-5v59) — critical
- [CVE-2026-49468](https://catalog.anomity.ai/vuln/cve-2026-49468) — critical
- [GHSA-53mr-w429-c597](https://catalog.anomity.ai/vuln/ghsa-53mr-w429-c597) — high
- [CVE-2026-114090](https://catalog.anomity.ai/vuln/cve-2026-114090) — high
- [CVE-2026-115419](https://catalog.anomity.ai/vuln/cve-2026-115419) — high
- [GHSA-7xgj-8392-5q4r](https://catalog.anomity.ai/vuln/ghsa-7xgj-8392-5q4r) — medium

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=cve-2026-44338