CVE-2026-34952
Unauthorized Access via Unauthenticated WebSocket in PraisonAI Gateway
Publication date: 2026-04-03
Last updated on: 2026-04-09
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| praison | praisonai | to 4.5.97 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-306 | The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability exists in PraisonAI, a multi-agent teams system, specifically in versions prior to 4.5.97. The PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology information at /info without requiring any authentication. This means that any network client can connect to the server, enumerate the registered agents, and send arbitrary messages to these agents and their associated tool sets.
How can this vulnerability impact me? :
This vulnerability allows an unauthenticated attacker to connect to the PraisonAI Gateway server, discover all registered agents, and send arbitrary messages to them. This can lead to unauthorized information disclosure and manipulation of agent behavior, potentially compromising the confidentiality and integrity of the system. The CVSS score of 9.1 indicates a high severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality and integrity.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, you should upgrade the PraisonAI Gateway server to version 4.5.97 or later, where the issue has been patched.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability allows any network client to connect to the PraisonAI Gateway server without authentication, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This unauthorized access and potential data exposure could lead to violations of data protection standards such as GDPR and HIPAA, which require strict access controls and protection of sensitive information.
Because the vulnerability results in high confidentiality and integrity impact (CVSS 9.1), it poses a significant risk to compliance with regulations that mandate safeguarding personal and sensitive data.