Lucene search
+L

2 matches found

OSV
OSV
•added 2026/07/15 12:32 p.m.•2 views

GHSA-5866-9272-QCFV Duplicate Advisory: PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hc5v-gxvj-58wh. This link is maintained to preserve external references. Original Description PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key...

7.3CVSS5.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/07/15 12:32 p.m.•11 views

Duplicate Advisory: PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hc5v-gxvj-58wh. This link is maintained to preserve external references. Original Description PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key...

7.3CVSS0.00389EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder