CVE-2026-39889 HIGH

CVE-2026-39889: PraisonAI has Unauthenticated SSE Event Stream Exposes All Agent Activity in A2U Server

Vendor Mervinpraison
Product PraisonAI
Weakness CWE-200 · Info exposure
Published April 8, 2026
Last update April 10, 2026
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

PraisonAI is a multi-agent teams system. Prior to 4.5.115, the A2U (Agent-to-User) event stream server in PraisonAI exposes all agent activity without authentication. The create_a2u_routes() function registers the following endpoints with NO authentication checks: /a2u/info, /a2u/subscribe, /a2u/events/{stream_name}, /a2u/events/sub/{id}, and /a2u/health. This vulnerability is fixed in 4.5.115.

Key dates

02Disclosure timeline

April 8, 2026 CVE published
April 10, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-4426 SetupAutomationSmm : SMRAM memory contents leak / information disclosure vulnerability in SMM module CVE-2024-8106 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure CVE-2024-40647 Unintentional exposure of environment variables to subprocesses in sentry-sdk CVE-2023-46669 Elastic Agent / Elastic Endpoint Security local API key disclosure CVE-2024-20507 Cisco Meeting Management Information Disclosure Vulnerability