PyPI/praisonai CVE-2026-55531: medium 6.5, EPSS 0.45%

PraisonAI MCP HTTP server has unauthenticated unbounded session accumulation (memory exhaustion; session TTL never enforced)

Action: Upgrade praisonai to 4.6.58 or later.

pip install praisonai==4.6.58

Affected

Fixed versions

Sources

• osv: GHSA-wv94-5qcp-6m36
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-wv94-5qcp-6m36
• https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58

CVE-2026-55531 · published 2026-08-25T14:34:28Z · modified 2026-09-10T12:25:36.289171253Z · JSON