CVE-2026-34952
CRITICAL
NVD
CVSS Score
9.1
Severity
CRITICAL
Published
Apr 03, 2026
Vendor
unknown
Description
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.