Vulnerability Description
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, ToolsMCPServer.run_sse and launch_tools_mcp_server bind to 0.0.0.0 and create /sse and /messages/ routes without invoking the available SecurityConfig authentication, origin-validation, or DNS-rebinding controls. Any reachable client can list and invoke registered tools, and a browser can target a local instance through DNS rebinding, with impact determined by the registered file, shell, and code-execution tools. This vulnerability is fixed in praisonaiagents 1.6.59.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/MervinPraison/PraisonAI/commit/2adfe7e8323f6deec66925cf15a885
- https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.59
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x227-pf99-vf
FAQ
What is CVE-2026-57123?
CVE-2026-57123 is a vulnerability with a CVSS score of 9.8 (CRITICAL). PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, ToolsMCPServer.run_sse and launch_tools_mcp_server bind to 0.0.0.0 and create /sse and /messages/ routes without invoking the ...
How severe is CVE-2026-57123?
CVE-2026-57123 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-57123?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.