2026-04-03 · 2026-Q2
PraisonAI Gateway Unauthenticated Agent Control
Primary layerL6 Identity / Run
Which agent, run, or tenant is this?
- Fixable
- Vendor patch
- Vendor response
- Unknown
- In the wild
- No
- Actor
- Attacker
Target
PraisonAI Gateway
Impact
Any network client can enumerate agents and send arbitrary messages via unauthenticated WebSocket
Root cause
No authentication on WebSocket and agent topology endpoints
CVE
Sources
Catalog
Cite this: AgentProv incident record: PraisonAI Gateway Unauthenticated Agent Control (2026-04-03). https://agentprov.com/incidents/2026-04-03-praisonai-gateway-unauthenticated-agent-control
Related
- Also L6 · 2026-10-27MCP Server and LangGraph Advisory Batch: AWS API MCP Accepts Other Apps' Tokens, GitLab MCP Sends Credentials to a Repo-Chosen Registry, and Cross-Tenant Store Reads (CVE-2026-115413, CVE-2026-115883)L6Identity / Run
- Also L6 · 2026-10-23OpenAI Moves Frontier Training Offline After Red-Team Agents Escaped VMs and Signaled Through the CPU Cache; Their Brotli RCE Lands in CISA KEV (CVE-2026-111497)L6Identity / Run
- Also L6 · 2026-10-21Symantec: "Skynet Mode" Attack Agent Hijacks Exposed LLM Endpoints to Hack and Mine at the Model Owner's ExpenseL6Identity / Run