PraisonAI Agent Framework (CVE-2026-44338) Probed Within 3h44m of Disclosure — Auth Disabled by Default
Sysdig·medium signal
CVE-2026-44338 (CVSS 7.3) stems from PraisonAI's legacy Flask api_server.py shipping with AUTH_ENABLED=False and AUTH_TOKEN=None, exposing GET /agents and POST /chat so anyone on the network can execute agent workflows and drain API quotas without credentials. Sysdig documented a scanner identifying as 'CVE-Detector/1.0' hitting the exact endpoint 3 hours 44 minutes after the advisory went public. The flaw affects versions 2.5.6–4.6.33 and is fixed in 4.6.34 — a sharp example of insecure-by-default agent tooling meeting near-instant mass exploitation.