Vulnerability Description
PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api/mcp/connect without mandatory authentication and accept caller-controlled command and args values that PraisonAIUI passes to StdioMCPClient to start a local process. Because the UI commands bind to 0.0.0.0 by default, a reachable unauthenticated client can execute commands as the UI service account even when the MCP handshake later fails. This vulnerability is fixed in 4.6.59.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/MervinPraison/PraisonAI/commit/2adfe7e8323f6deec66925cf15a885
- https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.59
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p5
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p5
FAQ
What is CVE-2026-57124?
CVE-2026-57124 is a vulnerability with a CVSS score of 9.8 (CRITICAL). PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api/mcp/connect without mandatory authentication and accept caller-controlled command and args v...
How severe is CVE-2026-57124?
CVE-2026-57124 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-57124?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.