CloakHQ's Open-Source Chromium Fork Defeats Cloudflare, DataDome, and PerimeterX Without Configuration

Security researchers at Sysdig recorded the first exploitation attempt against CVE-2026-44338 — a missing-authentication flaw in the open-source PraisonAI multi-agent framework — just three hours, 44 minutes, and 39 seconds after GitHub published the advisory on May 11, 2026 at 13:56 UTC