Beveiligingsadvies

CVE-2026-34953

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-03 22:54:03

Laatst bijgewerkt 2026-04-06 16:04:54

Toegewezen door GitHub_M

CVSS-score 9.1

Status PUBLISHED

Beschrijving

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.

← Alle CVE's bekijken Bekijk op cve.org ↗