PraisonAI's own MCP server binds without a host restriction and skips auth entirely

NVD·high signalXBlueskyLinkedInCopy link

CVE-2026-57139, published 2026-09-15, also scores 9.8. From 1.5.0 until 1.7.2, `MCPServer.startHttp()` in src/praisonai-ts/src/mcp/server.ts binds with no host restriction and forwards every HTTP POST to `handleRequest()` without authentication or authorization, so any network client can call tools/list, tools/call, resources/read or prompts/get and run registered handlers with server-side credentials. Fixed in 1.7.2. This is the second unauthenticated-MCP CVE in the same project in two days.