CVE-2026-34952
Received Received - Intake
Unauthorized Access via Unauthenticated WebSocket in PraisonAI Gateway

Publication date: 2026-04-03

Last updated on: 2026-04-09

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-03
Last Modified
2026-04-09
Generated
2026-06-16
AI Q&A
2026-04-04
EPSS Evaluated
2026-06-15
NVD
CVE-2026-34952
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
praison praisonai to 4.5.97 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The vulnerability exists in PraisonAI, a multi-agent teams system, specifically in versions prior to 4.5.97. The PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology information at /info without requiring any authentication. This means that any network client can connect to the server, enumerate the registered agents, and send arbitrary messages to these agents and their associated tool sets.

Impact Analysis

This vulnerability allows an unauthenticated attacker to connect to the PraisonAI Gateway server, discover all registered agents, and send arbitrary messages to them. This can lead to unauthorized information disclosure and manipulation of agent behavior, potentially compromising the confidentiality and integrity of the system. The CVSS score of 9.1 indicates a high severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality and integrity.

Mitigation Strategies

To mitigate this vulnerability, you should upgrade the PraisonAI Gateway server to version 4.5.97 or later, where the issue has been patched.

Compliance Impact

The vulnerability allows any network client to connect to the PraisonAI Gateway server without authentication, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This unauthorized access and potential data exposure could lead to violations of data protection standards such as GDPR and HIPAA, which require strict access controls and protection of sensitive information.

Because the vulnerability results in high confidentiality and integrity impact (CVSS 9.1), it poses a significant risk to compliance with regulations that mandate safeguarding personal and sensitive data.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-34952. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart