CVE-2026-40116

Descrição

PraisonAI is a multi-agent teams system. Prior to 4.5.128, the /media-stream WebSocket endpoint in PraisonAI-s call module accepts connections from any client without authentication or Twilio signature validation. Each connection opens an authenticated session to OpenAI-s Realtime API using the server-s API key. There are no limits on concurrent connections, message rate, or message size, allowing an unauthenticated attacker to exhaust server resources and drain the victim-s OpenAI API credits. This vulnerability is fixed in 4.5.128.