CVE-2026-34952: PraisonAI: Missing Authentication in WebSocket Gateway

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-04-03 · updated 2026-07-24
Weakness: CWE-306

Description

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.

Affected products

MervinPraison PraisonAI: before 4.5.97 — fixed in 4.5.97

How to fix

Upgrade to a fixed version: MervinPraison PraisonAI 4.5.97. Check the vendor advisory for mitigations.

References

https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfh6-vr3j-qc3g
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfh6-vr3j-qc3g

Get alerted when CVE-2026-34952 or the next vulnerability affects your stack