CVE-2026-55532 | MervinPraison PraisonAI up to 4.6.57 MCP HTTP Stream _validate_origin access control

August 25, 2026 Yanac

A vulnerability described as critical has been identified in MervinPraison PraisonAI up to 4.6.57. Impacted is the function _validate_origin of the component MCP HTTP Stream. Executing a manipulation can lead to improper access controls.

This vulnerability is tracked as CVE-2026-55532. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More