A critical authentication bypass vulnerability in PraisonAI allows unauthenticated remote attackers to intercept sensitive agent-to-user communication and activity logs.

This vulnerability is an exposure of sensitive information (CWE-200) caused by the failure of the create_a2u_routes function to implement authentication checks. Unauthenticated attackers can access the /a2u/info, /a2u/subscribe, /a2u/events/{stream_name}, /a2u/events/sub/{id}, and /a2u/health endpoints.

The exploitation of this flaw could lead to the unauthorized disclosure of proprietary agent workflows, user interactions, and sensitive system state information. With a CVSS score of 7.5, this high-severity issue poses a significant risk to organizational confidentiality, particularly if the PraisonAI system is utilized for processing internal business logic or sensitive data streams.

Immediate Action: Update the PraisonAI package to version 4.5.115 or later immediately to apply the required authentication middleware to the affected endpoints.

Proactive Monitoring: Review web access logs for anomalous requests to the /a2u/ path, specifically monitoring for high-frequency connection attempts from unauthorized IP addresses.

Compensating Controls: If immediate patching is not feasible, implement strict network-level access control lists or a Web Application Firewall (WAF) rule to block public access to the /a2u/ endpoint prefix.

Public Exploit Available: No (exploit_available: unknown)

Given the ease of exploitation and the exposure of sensitive internal agent communications, organizations utilizing PraisonAI must prioritize this update. Ensure all instances are upgraded to version 4.5.115 immediately to remediate the authentication bypass and prevent unauthorized information disclosure.