Authentication Bypass in PraisonAI Flask API Server

CVE-2026-47393

What is CVE-2026-47393?

PraisonAI includes a code generator that produces a Flask API server with authentication disabled by default. Following the quickstart guide can lead to deploying a server that listens on all interfaces (0.0.0.0), exposing critical endpoints such as '/chat' and '/agents'. This poses a significant risk, as users interacting with this API may inadvertently expose sensitive API key materials due to the lack of authentication mechanisms. The vulnerability persists in versions prior to 4.6.40, where the generator configuration sets 'auth_enabled' to 'False' by default. Users are advised to upgrade to version 4.6.40 or opt-in to enabled authentication in their deployments.

References