CVE-2026-44338 is a newly disclosed authentication bypass vulnerability in PraisonAI, an open-source multi-agent orchestration framework. The vulnerability allows unauthenticated access to sensitive API endpoints when the legacy Flask API server is used.

The issue is serious because threat actors were observed probing vulnerable PraisonAI...