PraisonAI Vulnerability Exposes Security Risks, Prompting Urgent Mitigation
A critical vulnerability in PraisonAI's legacy API server component has been identified, affecting versions 2.5.6 to 4.6.33. The issue, which involves authentication being disabled by default, allows unauthorized access to agent workflows. The vulnerability was disclosed on May 11, and within hours, probing activity was detected. Sysdig has advised organizations to upgrade to version 4.6.34, which addresses the issue by introducing stronger authentication protections. The vulnerability highlights the risks associated with accelerated AI adoption without proper security audits.