CVE-2026-57139

Name of the Vulnerable Software and Affected Versions PraisonAI versions 1.5.0 through 1.7.1

Description In the multi-agent teams system, the MCPServer.startHttp() function in src/praisonai-ts/src/mcp/server.ts binds without host restrictions and forwards all HTTP POST requests to the handleRequest() function without requiring authentication or authorization. This allows any network client with access to the port to access the 'tools/list', 'tools/call', 'resources/read', or 'prompts/get' endpoints. Consequently, registered handlers may execute using server-side credentials and process privileges, or sensitive registered data may be disclosed.

Recommendations Update to version 1.7.2.