CVE-2026-57124

9.8 Critique

Publiée le 14/09/2026 à 18:17 · Modifiée le 15/09/2026 à 16:45 · Analyse NVD reportée · Source : security-advisories@github.com

Description

PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api/mcp/connect without mandatory authentication and accept caller-controlled command and args values that PraisonAIUI passes to StdioMCPClient to start a local process. Because the UI commands bind to 0.0.0.0 by default, a reachable unauthenticated client can execute commands as the UI service account even when the MCP handshake later fails. This vulnerability is fixed in 4.6.59.

Traduire en français

Produits concernés

MervinPraison PraisonAI

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-78
CWE-306

Références

https://github.com/MervinPraison/PraisonAI/commit/2adfe7e8323f6deec66925cf15a885b6238895e9
https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.59
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories