PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-05-14 11:40 UTC
  • Importiert: 2026-05-22 16:11 UTC
  • CVSS: 7.3
  • Quelle-ID: thn_global
  • uid_hash: a97b71f88a6225cf89ad863d4ce95f7cbde6d8af058393c6530d9706ca0f9da6

Inhalt

Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open-source multi-agent orchestration framework, within four hours of its public disclosure. The vulnerability in question is CVE-2026-44338 (CVSS score: 7.3), a case of missing authentication that exposes sensitive endpoints to anyone, potentially allowing an attacker to invoke

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-44338

HIGH

7.3

HIGH

7.3

2026-05-08

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews