CVE-2026-55536

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58

Description The Browser Server contains an authentication bypass in the handle connection() function. The server validates incoming WebSocket connections by checking the Chrome extension origin using re.match() with the expression chrome-extension://[a-z0-9]{32}. Because re.match() only anchors at the start of the string and not the end, any Origin header containing more than 32 alphanumeric characters after the scheme will pass the check.

An attacker can bypass this validation by forging an Origin header with 33 or more characters. Once connected, the attacker can send start session commands to the server, which are then broadcast to any connected Chrome extension. This allows for unauthorized browser automation, including the theft of session cookies from all open tabs and the capture of screenshots.

Recommendations Update PraisonAI to version 4.6.58 or later. As a temporary mitigation, restrict access to the Browser Server to only trusted local interfaces and avoid enabling remote access via PRAISONAI BROWSER ALLOW REMOTE=true.