Is CVE-2026-44338 actively exploited?

Yes. CVE-2026-44338 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2026-44338 be exploited remotely?

Yes. CVE-2026-44338 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-44338?

CVE-2026-44338 has a CVSS score of 7.3 (HIGH).

HOME VULNERABILITIESCVE-2026-44338

HIGHCISA KEVIN THE WILD

CVE-2026-44338

CWE-306Published: May 8, 2026· Updated: May 8, 2026

7.3

CVSS v3.1

EPSS:0.06%probability of exploitation in 30 daysPercentile:17.2th

Official Description

PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. This issue has been patched in version 4.6.34.

NVD Source

Technical Analysis

CVE-2026-44338 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

CISA has added CVE-2026-44338 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityLow

AvailabilityLow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Vendors & Products

praison1 product

praisonai

Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

ACTIVE EXPLOITATIONConfirmed exploitation in the wild

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6rmh-7xcm-cpxj

News & Research Mentioning CVE-2026-44338

PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

The Hacker News· May 14, 2026

Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open-source multi-agent orchestration framework, within four hours of its public disclosure. The vulnerability in question is CVE-2026-44338 (CVSS score: 7.3), a case of missing authentication that exposes sensitive endpoints to anyone, potentially allowing an attacker to invoke [xlite_meta score:37 src:The Hacker News xlite_fp:d0162f50f60328687c6eb2b9e393293ebc65fa7e691a62138ac945960fa1e48a]