https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 22:12:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-290516 EUVD-2026-290516 https://cve.radiocsirt.org/vuln/euvd-2026-290516 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39889 <p>PraisonAI is a multi-agent teams system. Prior to 4.5.115, the A2U (Agent-to-User) event stream server in PraisonAI exposes all agent activity without authentication. The create_a2u_routes() function registers the following endpoints with NO authentication checks: /a2u/info, /a2u/subscribe, /a2u/events/{stream_name}, /a2u/events/sub/{id}, and /a2u/health. This vulnerability is fixed in 4.5.115.</p> <p>PraisonAI is a multi-agent teams system. Prior to 4.5.115, the A2U (Agent-to-User) event stream server in PraisonAI exposes all agent activity without authentication. The create_a2u_routes() function registers the following endpoints with NO authentication checks: /a2u/info, /a2u/subscribe, /a2u/events/{stream_name}, /a2u/events/sub/{id}, and /a2u/health. This vulnerability is fixed in 4.5.115.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-39889 https://cve.radiocsirt.org/vuln/ghsa-f292-66h9-fpmf <p><strong>Affected:</strong> PyPI: praisonai</p> <p>The A2U (Agent-to-User) event stream server in PraisonAI exposes all agent activity without authentication. This is a separate component from the gateway server fixed in CVE-2026-34952.</p> <p>The create_a2u_routes() function registers the following endpoints with NO authentication checks: - GET /a2u/info — exposes server info and stream names - POST /a2u/subscribe — creates event stream subscription - GET /a2u/events/{stream_name} — streams ALL agent events - GET /a2u/events/sub/{id} — streams events for subscription - GET /a2u/health — health check</p> <p>An unauthenticated attacker can: 1. POST /a2u/subscribe → receive subscription_id 2. GET /a2u/events/sub/{subscription_id} → receive live SSE stream of all agent events including responses, tool calls, and thinking</p> <p>This exposes sensitive agent activity including responses, internal reasoning, and tool call arguments to any network attacker.</p> <p>&lt;img width=&#34;1512&#34; height=&#34;947&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/3438f3ea-75ec-4978-9dd9-d9a6da42c248&#34; /&gt;</p> <p>&lt;img width=&#34;1512&#34; height=&#34;571&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/ee3313f6-f522-48f7-9c06-e5e265c6aeb4&#34; /&gt;</p> <p>[1] POST /a2u/subscribe (no auth token) Status: 200 Response: {&#34;subscription_id&#34;:&#34;sub-a1ad8a6edd8b&#34;,&#34;stream_name&#34;:&#34;events&#34;, &#34;stream_url&#34;:&#34;http://testserver/a2u/events/sub-a1ad8a6edd8b&#34;} Got subscription_id: sub-a1ad8a6edd8b</p> <p>[2] GET /a2u/info (no auth token) Status: 200 Response: {&#34;nam…</p> <p><strong>Affected:</strong> PyPI: praisonai</p> <p>The A2U (Agent-to-User) event stream server in PraisonAI exposes all agent activity without authentication. This is a separate component from the gateway server fixed in CVE-2026-34952.</p> <p>The create_a2u_routes() function registers the following endpoints with NO authentication checks: - GET /a2u/info — exposes server info and stream names - POST /a2u/subscribe — creates event stream subscription - GET /a2u/events/{stream_name} — streams ALL agent events - GET /a2u/events/sub/{id} — streams events for subscription - GET /a2u/health — health check</p> <p>An unauthenticated attacker can: 1. POST /a2u/subscribe → receive subscription_id 2. GET /a2u/events/sub/{subscription_id} → receive live SSE stream of all agent events including responses, tool calls, and thinking</p> <p>This exposes sensitive agent activity including responses, internal reasoning, and tool call arguments to any network attacker.</p> <p>&lt;img width=&#34;1512&#34; height=&#34;947&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/3438f3ea-75ec-4978-9dd9-d9a6da42c248&#34; /&gt;</p> <p>&lt;img width=&#34;1512&#34; height=&#34;571&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/ee3313f6-f522-48f7-9c06-e5e265c6aeb4&#34; /&gt;</p> <p>[1] POST /a2u/subscribe (no auth token) Status: 200 Response: {&#34;subscription_id&#34;:&#34;sub-a1ad8a6edd8b&#34;,&#34;stream_name&#34;:&#34;events&#34;, &#34;stream_url&#34;:&#34;http://testserver/a2u/events/sub-a1ad8a6edd8b&#34;} Got subscription_id: sub-a1ad8a6edd8b</p> <p>[2] GET /a2u/info (no auth token) Status: 200 Response: {&#34;nam…</p> https://cve.radiocsirt.org/vuln/ghsa-f292-66h9-fpmf https://cve.radiocsirt.org/vuln/pysec-2026-2911 <p><strong>Affected:</strong> PyPI: praisonai</p> <p>The A2U (Agent-to-User) event stream server in PraisonAI exposes all agent activity without authentication. This is a separate component from the gateway server fixed in CVE-2026-34952.</p> <p>The create_a2u_routes() function registers the following endpoints with NO authentication checks: - GET /a2u/info — exposes server info and stream names - POST /a2u/subscribe — creates event stream subscription - GET /a2u/events/{stream_name} — streams ALL agent events - GET /a2u/events/sub/{id} — streams events for subscription - GET /a2u/health — health check</p> <p>An unauthenticated attacker can: 1. POST /a2u/subscribe → receive subscription_id 2. GET /a2u/events/sub/{subscription_id} → receive live SSE stream of all agent events including responses, tool calls, and thinking</p> <p>This exposes sensitive agent activity including responses, internal reasoning, and tool call arguments to any network attacker.</p> <p>&lt;img width=&#34;1512&#34; height=&#34;947&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/3438f3ea-75ec-4978-9dd9-d9a6da42c248&#34; /&gt;</p> <p>&lt;img width=&#34;1512&#34; height=&#34;571&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/ee3313f6-f522-48f7-9c06-e5e265c6aeb4&#34; /&gt;</p> <p>[1] POST /a2u/subscribe (no auth token) Status: 200 Response: {&#34;subscription_id&#34;:&#34;sub-a1ad8a6edd8b&#34;,&#34;stream_name&#34;:&#34;events&#34;, &#34;stream_url&#34;:&#34;http://testserver/a2u/events/sub-a1ad8a6edd8b&#34;} Got subscription_id: sub-a1ad8a6edd8b</p> <p>[2] GET /a2u/info (no auth token) Status: 200 Response: {&#34;nam…</p> <p><strong>Affected:</strong> PyPI: praisonai</p> <p>The A2U (Agent-to-User) event stream server in PraisonAI exposes all agent activity without authentication. This is a separate component from the gateway server fixed in CVE-2026-34952.</p> <p>The create_a2u_routes() function registers the following endpoints with NO authentication checks: - GET /a2u/info — exposes server info and stream names - POST /a2u/subscribe — creates event stream subscription - GET /a2u/events/{stream_name} — streams ALL agent events - GET /a2u/events/sub/{id} — streams events for subscription - GET /a2u/health — health check</p> <p>An unauthenticated attacker can: 1. POST /a2u/subscribe → receive subscription_id 2. GET /a2u/events/sub/{subscription_id} → receive live SSE stream of all agent events including responses, tool calls, and thinking</p> <p>This exposes sensitive agent activity including responses, internal reasoning, and tool call arguments to any network attacker.</p> <p>&lt;img width=&#34;1512&#34; height=&#34;947&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/3438f3ea-75ec-4978-9dd9-d9a6da42c248&#34; /&gt;</p> <p>&lt;img width=&#34;1512&#34; height=&#34;571&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/ee3313f6-f522-48f7-9c06-e5e265c6aeb4&#34; /&gt;</p> <p>[1] POST /a2u/subscribe (no auth token) Status: 200 Response: {&#34;subscription_id&#34;:&#34;sub-a1ad8a6edd8b&#34;,&#34;stream_name&#34;:&#34;events&#34;, &#34;stream_url&#34;:&#34;http://testserver/a2u/events/sub-a1ad8a6edd8b&#34;} Got subscription_id: sub-a1ad8a6edd8b</p> <p>[2] GET /a2u/info (no auth token) Status: 200 Response: {&#34;nam…</p> https://cve.radiocsirt.org/vuln/pysec-2026-2911