Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-03 | 2 | Disclosure1Patch1 |
| 2026-04-04 | 1 | Disclosure1 |
| 2026-04-06 | 1 | Disclosure1 |
| 2026-04-09 | 1 | General1 |
[CVE-2026-34952: CRITICAL] PraisonAI Gateway server had a security vulnerability allowing unauthorized access. Update to version 4.5.97 to fix the issue and enhance cybersecurity. #cybersecurity#cve,CVE-2026-34952,#cybersecurity https://cvefind.com/CVE-2026-34952
Post summary
CVE-2026-34952 is a critical vulnerability in PraisonAI Gateway that permits unauthorized access. Users are advised to update to version 4.5.97 for remediation.
🔴 PraisonAI, Authentication Bypass, #CVE-2026-34952 (Critical) https://dailycve.com/praisonai-authentication-bypass-cve-2026-34952-critical/
Post summary
The post alerts about a critical authentication bypass CVE but offers no additional details, exploitation evidence, patches, or technical specifics.
🚨 CVE-2026-34952: PraisonAI: Missing Authenticatio... Wide-open WebSocket gateway lets anyone hijack AI agent clusters and execute arbitrary tool commands across the entire ... https://zerodaysignal.com/vulnerability/CVE-2026-34952 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces CVE-2026-34952, revealing a missing authentication flaw in PraisonAI’s WebSocket gateway that permits unauthenticated hijacking of AI agent clusters and arbitrary command execution.
🔴 CVE-2026-34952 - Critical PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authenticati... https://www.thehackerwire.com/vulnerability/CVE-2026-34952/ https://t.co/dbd9XysEEN
Post summary
The post announces CVE‑2026‑34952 for PraisonAI Gateway, noting unauthenticated WebSocket and topology endpoints, but lacks PoC, exploit, patch, or active exploitation details.
Missing authentication in `PraisonAI`'s WebSocket Gateway (CVE-2026-34952) allows unauthorized access. Review and implement strong authentication for all WebSocket connections. #PraisonAI #WebSockets #AuthBypass #infosec https://www.pulsepatch.io/posts/cve-2026-34952-praisonai-websocket-missing-authentication
Post summary
The tweet announces a missing authentication vulnerability (CVE-2026-34952) in PraisonAI's WebSocket Gateway, advises strengthening authentication, but does not provide PoC, exploit code, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | praison | praisonai | - | - | - |