CVE-2026-47393 PUBLISHED

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

Assigner: GitHub_M
Reserved: 19.05.2026 Published: 21.07.2026 Updated: 21.07.2026

PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-generator (praisonai.deploy.api.generate_api_server_code) that emits a Flask API server with authentication disabled by default. Users who follow the documented quickstart (praisonai deploy --type api) get a server that binds to 0.0.0.0 per the recommended sample YAML, exposes /chat and /agents endpoints, runs praisonai.run() on user-supplied JSON input — LLM orchestration with the API key materials present in the process environment, and does not require any authentication. Versions prior to 4.6.40 still ship the generator with auth_enabled defaulting to False. The fix shape is opt-in via APIConfig(auth_enabled=True, auth_token=...). Version 4.6.40 fixes the issue.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Product Status

Vendor MervinPraison
Product PraisonAI
Versions
  • Version < 4.6.40 is affected

References

Problem Types

  • CWE-306: Missing Authentication for Critical Function CWE
  • CWE-1188: Insecure Default Initialization of Resource CWE