A missing authentication vulnerability in PraisonAI affects versions 2.5.6 through 4.6.33, exposing multi-agent workflows to unauthenticated remote attackers.

This vulnerability is classified as a missing authentication flaw (CWE-306) residing in the legacy Flask API server, which allows unauthenticated remote attackers to access restricted endpoints and trigger workflows via the chat interface.

A successful exploit allows unauthorized users to interact with deployed multi-agent workflows, potentially leading to unauthorized data exposure, manipulation of agent actions, and resource exhaustion. With a CVSS score of 7.3, this high severity issue poses a significant risk to organizational operations and confidentiality if the API is exposed to untrusted networks.

Immediate Action: Update PraisonAI to version 4.6.34 or later to resolve the missing authentication issue in the Flask API server.

Proactive Monitoring: Monitor API access logs for unusual inbound requests targeting the chat and agent endpoints, especially those originating from external or unauthenticated IP addresses.

Compensating Controls: Implement network segmentation or deploy a Web Application Firewall rule to restrict access to the legacy Flask API server until updates can be applied.

Public Exploit Available: Yes, a public proof-of-concept repository exists on GitHub and a Nuclei detection template is available.

Administrators must treat this vulnerability with high priority due to the presence of public proof-of-concept code and unauthenticated remote vector access. Immediate application of the 4.6.34 patch is required to secure the environment against unauthorized workflow execution.