CVE-2026-34952

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.

• CWE-306

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfh6-vr3j-qc3gExploit, Vendor Advisory
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfh6-vr3j-qc3gExploit, Vendor Advisory

Published

Apr 3, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34945Wasmtime is a runtime for WebAssembly. From 25.0.0 to before…6.5
• CVE-2026-34946Wasmtime is a runtime for WebAssembly. From 25.0.0 to before…7.5
• CVE-2026-34947Discourse is an open-source discussion platform. From versio…5.3
• CVE-2026-3495Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fa…4.8
• CVE-2026-34950fast-jwt provides fast JSON Web Token (JWT) implementation. …9.1
• CVE-2026-34951Workbench is a suite of tools for administrators and develop…6.1
• CVE-2026-34953PraisonAI is a multi-agent teams system. Prior to version 4.…9.1
• CVE-2026-34954PraisonAI is a multi-agent teams system. Prior to version 1.…8.6
• CVE-2026-34955PraisonAI is a multi-agent teams system. Prior to version 4.…10
• CVE-2026-34956A flaw was found in Open vSwitch. When Open vSwitch is confi…5.9
• CVE-2026-3496The JetBooking plugin for WordPress is vulnerable to SQL Inj…7.5
• CVE-2026-34960barebox prior to version 2026.04.0 contains an out-of-bounds…7.1