PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55532 · GHSA-pvph-5j39-v8qc
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55532 · GHSA-pvph-5j39-v8qc
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55533 · GHSA-gfq8-hmph-9gjv
/api/v1/runs) has no authentication — unauthenticated job execution, result theft, cancel and deletePyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55539 · GHSA-2jgc-f764-c5r2
user_id in FileMemory.__init__() — path traversal to any writable locationPyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55527 · GHSA-gxmw-5f7x-6g22
--api-key flag on praisonai serve is not properly enforcedPyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55541 · GHSA-pvxx-r596-f5qj
JobSubmitRequest.validate_webhook_url() — bypass of CVE-2026-40114PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55537 · GHSA-rg5q-pp8p-f7jm
praisonai serve agents --api-key is silently ignored — agent-invocation routes (POST /agents, POST /agents/{agent_name}) run unauthenticatedPyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55538 · GHSA-r7v3-x45f-g7hp
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55540 · GHSA-ch89-h4r2-c8f8
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55524 · GHSA-vg6p-v9vm-6fgj
PyPI praisonai · Upgrade to 4.6.58 or later · >= 4.6.34, < 4.6.58 · CVE-2026-55534 · GHSA-7ww9-85pg-cv4x
spider_tools._host_is_blocked() via DNS-resolved hostnames (127.0.0.1.nip.io)PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55526 · GHSA-x44h-65qv-cw74
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55528 · GHSA-7g3p-92qq-8wvh
web_crawl SSRF protection bypass via unchecked redirect targetsPyPI praisonaiagents · Upgrade to 1.6.58 or later · >= 1.5.128, < 1.6.58 · CVE-2026-55523 · GHSA-8hjw-25cg-g52h
PyPI praisonai · Upgrade to 4.6.58 or later · >= 3.9.26, < 4.6.58 · +1 more package · CVE-2026-55522 · GHSA-hxmv-c4g6-5fqc
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55525 · GHSA-5r34-2g38-6569
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.