GHSA-8444-4fhq-fxpq: PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

Summary

PraisonAI 4.6.33, the current @latest PyPI wheel, ships a code generator (praisonai.deploy.api.generate_api_server_code) that emits a Flask API server with auth_enabled defaulting to False in praisonai/deploy/models.py. The documented command praisonai deploy --type api therefore produces a server bound to 0.0.0.0 that exposes /chat and /agents without authentication, letting unauthenticated callers run praisonai.run() on user-supplied JSON. The record cross-references CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) as a related issue.

Mitigation

The fix shape is opt-in: set APIConfig(auth_enabled=True, auth_token=...) to enable authentication. No fixed release version is stated in the source.

Related items

• MediumWhen LLM Gateways Go Wrong: Findings from LiteLLMSimilar attack · Check Point Research
• HighCVE-2026-109403: conductor-oss conductor server-side request forgery in agent card fetchingSimilar attack · NVD/CVE Database
• InfoExploring Backdoor Vulnerabilities and Fairness Challenges in Generative Models: A SurveySimilar attack · ACM Digital Library (TOPS, DTRAP, CSUR)
• LowSmall AI Models Could Soon Self-Replicate on IoT Devices, Anthropic WarnsSimilar attack · SecurityWeek
• MediumCVE-2026-108940: Mistral.rs path traversal through calibration_apply save_cimatrix argumentSimilar attack · NVD/CVE Database