PT-2026-61766 · Pypi · Praisonaiagents+1
CVE-2026-57112
·
Published
2026-06-18
·
Updated
2026-07-23
CVSS v3.1
8.3
High
| Vector | AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
praisonaiagents versions 0.6.0 through 1.6.58
praisonai versions 3.10.0 through 4.6.58
Description
The
run sse() function in ToolsMCPServer creates a Starlette MCP HTTP+SSE server that fails to validate the Origin and Host headers and does not require authentication. This allows a malicious website to use DNS rebinding—a technique that tricks a browser into making requests to a local IP address—to interact with a local or internal SSE MCP server. An attacker can discover and invoke registered tools as the local user, potentially accessing local files, repositories, cloud APIs, or internal services.The issue affects the following API endpoints:
- '/sse'
- '/messages/'
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, consider disabling the
--transport sse server mode in favor of the Streamable HTTP implementation.
Restrict access to the run sse() function to minimize the risk of exploitation.Missing Authentication
Origin Validation Error
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonai
Praisonaiagents