CVE-2026-39889

PraisonAI is a multi-agent teams system. Prior to 4.5.115, the A2U (Agent-to-User) event stream server in PraisonAI exposes all agent activity without authentication. The create_a2u_routes() function registers the following endpoints with NO authentication checks: /a2u/info, /a2u/subscribe, /a2u/events/{stream_name}, /a2u/events/sub/{id}, and /a2u/health. This vulnerability is fixed in 4.5.115.

• CWE-200

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f292-66h9-fpmfVendor Advisory

Published

Apr 8, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-39882OpenTelemetry-Go is the Go implementation of OpenTelemetry. …5.3
• CVE-2026-39883OpenTelemetry-Go is the Go implementation of OpenTelemetry. …7
• CVE-2026-39884mcp-server-kubernetes is a Model Context Protocol server for…8.1
• CVE-2026-39885FrontMCP is a TypeScript-first framework for the Model Conte…7.5
• CVE-2026-39886OpenEXR provides the specification and reference implementat…5.3
• CVE-2026-39888PraisonAI is a multi-agent teams system. Prior to 1.5.115, e…9.9
• CVE-2026-3989SGLangs `replay_request_dump.py` contains an insecure pickle…7.8
• CVE-2026-39890PraisonAI is a multi-agent teams system. Prior to 4.5.115, t…9.8
• CVE-2026-39891PraisonAI is a multi-agent teams system. Prior to 4.5.115, t…8.8
• CVE-2026-39892cryptography is a package designed to expose cryptographic p…9.8
• CVE-2026-39893Cacti is an open source performance and fault management fra…9.8
• CVE-2026-39894Cacti is an open source performance and fault management fra…2.5