CVE-2026-57123
Deferred Deferred - Pending Action

Unauthenticated Remote Tool Access in PraisonAI

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, ToolsMCPServer.run_sse and launch_tools_mcp_server bind to 0.0.0.0 and create /sse and /messages/ routes without invoking the available SecurityConfig authentication, origin-validation, or DNS-rebinding controls. Any reachable client can list and invoke registered tools, and a browser can target a local instance through DNS rebinding, with impact determined by the registered file, shell, and code-execution tools. This vulnerability is fixed in praisonaiagents 1.6.59.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-57123
EUVD
EUVD-2026-77539

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
praisonai praisonaiagents 1.6.59
mervinpraison praisonaiagents 1.6.59
mervinpraison praisonai *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-350 The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname.
CWE-1327 The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects PraisonAI's MCP SSE transport, which binds to all network interfaces (0.0.0.0) without authentication or origin validation. The Starlette application lacks security middleware, exposing it to unauthorized access. Existing security functions in mcp_security.py are unused, allowing any network-accessible host to invoke tools without credentials. A browser can also exploit DNS rebinding to interact with a localhost instance, bypassing same-origin policies.

Detection Guidance

Check if PraisonAI's MCP server is binding to 0.0.0.0 by running netstat -tulnp | grep 0.0.0.0 or ss -tulnp | grep 0.0.0.0. Verify if /sse or /messages/ routes are exposed without authentication by inspecting server logs or using curl http://<server-ip>:<port>/sse and curl http://<server-ip>:<port>/messages/. Look for unauthorized tool invocations in logs.

Test for DNS rebinding risks by attempting to access the server via different hostnames pointing to 127.0.0.1. Check if security controls like authentication or origin validation are disabled in mcp_security.py.

Impact Analysis

An attacker could remotely execute arbitrary code if tools with file, shell, or code execution capabilities are registered. Unauthorized users may list and invoke tools, leading to data breaches, system compromise, or further network infiltration. Localhost instances are also vulnerable via DNS rebinding attacks.

Compliance Impact

This vulnerability likely violates GDPR's data protection principles (integrity and confidentiality) and HIPAA's security rule (access controls and integrity). Unauthorized access risks data breaches, non-compliance with breach notification requirements, and potential fines or penalties for failing to implement adequate security measures.

Mitigation Strategies

Upgrade to praisonaiagents 1.6.59 or later to apply the fix. Change the server binding from 0.0.0.0 to 127.0.0.1 in the configuration. Enable and enforce authentication and origin validation in mcp_security.py. Disable or restrict access to /sse and /messages/ routes if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57123. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart