PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55529 · GHSA-wj6g-v78p-6fx3
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
51–54 of 54 matching · newest first
PyPI praisonai · Upgrade to 4.6.58 or later · < 4.6.58 · CVE-2026-55529 · GHSA-wj6g-v78p-6fx3
web_crawl SSRF protection bypass via unchecked redirect targetsPyPI praisonaiagents · Upgrade to 1.6.58 or later · >= 1.5.128, < 1.6.58 · CVE-2026-55523 · GHSA-8hjw-25cg-g52h
PyPI praisonai · Upgrade to 4.6.58 or later · >= 3.9.26, < 4.6.58 · +1 more package · CVE-2026-55522 · GHSA-hxmv-c4g6-5fqc
PyPI praisonaiagents · Upgrade to 1.6.58 or later · < 1.6.58 · CVE-2026-55525 · GHSA-5r34-2g38-6569
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.