by Kastro
Paper/Archive/CVE-2026-34953

CVE-2026-34953

MervinPraison PraisonAI — PraisonAI: Authentication Bypass in OAuthManager.validate_token()

EPSS 0.4%public exploitCVSS 9.1
critical.is priorityof 100
44
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 33.2.332 × 206.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.

Affected

ProductAffectedFixed inSource
PraisonAI< 4.5.97–CNA

Scores by source

GitHub_M (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

exploitgithub.com/MervinPraison/PraisonAI/security/advisories/GHSA-98f9-fqg5-hvq5