Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| PraisonAI | pip | < 4.6.58 | 4.6.58 |
Miggo AIRoot Cause AnalysisThe vulnerability described in CVE-2026-55531 is an unauthenticated unbounded session accumulation in the PraisonAI MCP HTTP server. The advisory states that the mcp_post handler creates new sessions for every initialize request without enforcing any limits or cleanup, leading to potential memory exhaustion. Analyzing the provided patch commit 2f9677abb2ea68eab864ee8b6a828fd0141612e1 confirms this. The changes in src/praisonai/praisonai/mcp_server/transports/http_stream.py are directly related to fixing this issue. Specifically, the mcp_post function, which is nested within the _create_app method of the HTTPStreamTransport class, was modified. The patch introduces two key changes to this function: a call to self._cleanup_sessions() to remove expired sessions, and a check if len(self._sessions) >= self.max_sessions: to enforce a hard limit on the number of concurrent sessions. The absence of these checks in the vulnerable version is the root cause of the vulnerability. Therefore, the mcp_post function is the vulnerable function, as it's the entry point for the malicious requests and where the session creation logic resides without proper controls.
HTTPStreamTransport.mcp_postsrc/praisonai/praisonai/mcp_server/transports/http_stream.py