PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPServer.startHttp() in src/praisonai-ts/src/mcp/server.ts binds without a host restriction and forwards every HTTP POST request to handleRequest() without authentication or authorization. Any network client that can reach the port can call tools/list, tools/call, resources/read, or prompts/get, causing registered handlers to run with server-side credentials and process privileges or disclose registered data. An initial remediatio

CVE-2026-57139 affects PraisonAI, a multi-agent teams system, in versions 1.5.0 through 1.7.2. The vulnerability exists in MCPServer.startHttp() within src/praisonai-ts/src/mcp/server.ts, which binds without a host restriction. All HTTP POST requests are forwarded to handleRequest() without any authentication or authorization checks. Any network client able to reach the exposed port can invoke tools/list, tools/call, resources/read, or prompts/get endpoints. This allows attackers to execute registered handlers using server-side credentials and process privileges, or to disclose registered data. The vulnerability poses a significant risk in network-accessible deployments. A remediation was initially released in version 1.7.2. Users are advised to upgrade immediately to mitigate exposure.