CVE-2026-34952 | MervinPraison PraisonAI up to 4.5.96 Message /ws missing authentication (GHSA-cfh6-vr3j-qc3g)

A vulnerability, which was classified as critical, was found in MervinPraison PraisonAI up to 4.5.96. The impacted element is an unknown function of the file /ws of the component Message Handler. Executing a manipulation can lead to missing authentication.

This vulnerability is tracked as CVE-2026-34952. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.