Security readout for executives and security teams
Plain-English summary
PraisonAI versions before 4.6.58 can mistake a crafted WebSocket origin for a trusted Chrome extension. An unauthenticated remote party could then initiate browser sessions and automate the browser, threatening the confidentiality and integrity of accessible information and actions.
Executive priority
Prioritize immediate remediation where Browser Server is reachable or controls authenticated browsers. Upgrade promptly and investigate suspicious sessions. Less-exposed installations still require scheduled remediation because exploitation needs no account or user interaction, although active attacks are not established by the supplied evidence.
Technical view
Browser Server `_handle_connection()` used `re.match()` with an unanchored Chrome-extension origin pattern. Origins beginning with the expected 32-character identifier but containing trailing characters passed validation before WebSocket acceptance, enabling unauthorized `start_session` commands. This bypasses the earlier CVE-2026-40289 fix and is corrected in 4.6.58.
Likely exposure
Exposure requires PraisonAI earlier than 4.6.58 with Browser Server functionality active and its WebSocket endpoint reachable by an attacker. Risk is greatest where automated browser sessions can access authenticated applications or sensitive information. The supplied sources do not identify affected deployment counts.
Exploitation context
The CVSS 9.1 assessment describes network exploitation with low complexity, no privileges, and no user interaction. However, the supplied record is not in KEV and provides no evidence of active exploitation. Treat exploitation status as unconfirmed rather than absent.
Researcher notes
This is an authorization failure caused by incomplete origin-string validation, categorized as CWE-284 and CWE-625. The critical boundary is validation before `websocket.accept()`. Assessment should focus on exact-match enforcement, alternate malformed origins, endpoint reachability, and whether unauthorized sessions could inherit sensitive browser state.
Mitigation direction
- Upgrade PraisonAI to version 4.6.58 or later.
- Restrict Browser Server WebSocket access to trusted networks and clients until upgrading.
- Review vendor guidance for any additional deployment-specific safeguards.
- Rotate exposed credentials or sessions if logs indicate unauthorized browser automation.
Validation and detection
- Inventory PraisonAI versions and identify installations earlier than 4.6.58.
- Confirm whether Browser Server and its WebSocket endpoint are enabled and network-reachable.
- Verify the installed code enforces complete origin matching without accepting trailing characters.
- Review WebSocket and application logs for unexpected origins, connections, or browser-session starts.
- Confirm version 4.6.58 or later after remediation.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-284: Authorization and privilege behavior lookup
Authorization weaknesses can support privilege escalation and valid-account review, depending on exploit path. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCWE-625: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2026-55536 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Critical
- CVSS
- 9.1 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N3.95.2GitHub_MVulnerability scoring details
Base CVSS 3.1 score
9.1CriticalVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6g6r-q6gw-w8fgCVE reference, GitHub_M · x_refsource_CONFIRM
- https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1CVE reference, GitHub_M · x_refsource_MISC
- https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58CVE reference, GitHub_M · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
CWE mapping pending import
This CVE carries a CWE mapping that will resolve to a full Glexia CWE intelligence page after the official CWE import is complete.
CWE mapping pending import
This CVE carries a CWE mapping that will resolve to a full Glexia CWE intelligence page after the official CWE import is complete.