PraisonAI Unauthenticated Agent API Exploitation (CVE-2026-44338) - ATR-2026-00531 (f92439a4-74a3-593e-8eca-9c5f7c5664e6)
Detects CVE-2026-44338 (CVSS ~9.1): PraisonAI's legacy api_server.py exposes /agents and /chat HTTP endpoints without authentication by default. An unauthenticated remote attacker can POST to these endpoints to invoke agent execution on the host. Exploited in the wild within 4 hours of disclosure. Detection covers (a) MCP/tool configs pointing at PraisonAI /agents or /chat endpoints without auth headers, (b) tool call payloads invoking PraisonAI agent API without Authorization context, (c) content describing or weaponising the unauthenticated surface. Affected versions 2.5.6–4.6.33, patched in 4.6.34. CWE-306 (Missing Authentication for Critical Function).