CVE-2026-55532CWE-346CWE-352csrf

CVE-2026-55532

High · published August 25, 2026

CVSS v3.1
7.6
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, MCP HTTP Stream _validate_origin uses request_origin.startswith(allowed), allowing the attacker-controlled localhost.attacker.com HTTP origin to satisfy the localhost allowlist. A webpage can send Content-Type: text/plain requests without preflight and invoke tools/call without an API key, including file writes that persist agent instructions. This issue is fixed in version 4.6.58.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00197 · 9.0th percentile
Weaknesses
CWE-346 · Origin Validation Error; CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-08-25T20:16Z
References (3)
https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1 · [email protected]https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58 · [email protected]https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-pvph-5j39-v8qc · [email protected]
EPSS history
Timeline
  • 27 AUG 06:36Z
    EPSS moved — → 0%
    epss
  • 25 AUG 15:17Z
    PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server
    cvelistv5