CVE-2026-57112

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-57112

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57112.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-57112

Aliases

Published

2026-09-15T10:13:21Z

Modified

2026-09-18T03:30:25Z

Severity

8.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H CVSS Calculator

Summary

PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools

Details

PraisonAI is a multi-agent teams system. From praisonaiagents 0.6.0 until 1.6.59 and PraisonAI 3.10.0 until 4.6.59, ToolsMCPServer.run_sse() in src/praisonai-agents/praisonaiagents/mcp/mcp_server.py mounts SseServerTransport on the legacy /sse and /messages/ endpoints without default Host, Origin, or authentication enforcement. A malicious website can use DNS rebinding against a reachable local or internal SSE server, supply attacker-controlled Host and Origin headers, enumerate registered tools, and invoke them with the server user's privileges. The Streamable HTTP transport rejects the same hostile Origin, which isolates the flaw to the legacy SSE wrapper. An initial remediation was released in praisonaiagents 1.6.59 and PraisonAI 4.6.59.

Database specific

{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-306",
        "CWE-346",
        "CWE-862"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57112.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "0.6.0"
                },
                {
                    "fixed":  "1.6.59"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/mervinpraison/praisonai

Affected ranges

Type

GIT

Repo

https://github.com/mervinpraison/praisonai

Events

Introduced

863dd9bc3438352387584b025a7354174f746b55

Fixed

2adfe7e8323f6deec66925cf15a885b6238895e9

Fixed

f834d4244823481244f97ebc44b06ab59cc0079a

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "3.10.0"
        },
        {
            "fixed":  "4.6.59"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57112.json"