{"uuid": "9e305432-3698-441e-8252-bd0c16ac7de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55541", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtw4n5te3z2v", "content": "PraisonAI's `praisonai serve agents` and `serve unified` parse `--api-key` but never wire it into the FastAPI app \u2014 no middleware, no header check. CVE-2026-55541, HIGH, confirmed on 4.6.50: the server runs open regardless of the key you set. #dev", "creation_timestamp": "2026-08-25T15:20:58.165186Z"}