CVE-2026-55536 - PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks Chrome extension origins with re.match() and the unanchored expression chrome-extension://[a-z0-9]{32}. Extra trailing characters pass before websocket.accept(), allowing start_session commands and unauthorized browser automation. This issue is fixed in version 4.6.58. - 漏洞详情

漏洞编号：CVE-2026-55536

风险等级：危急

漏洞来源：CVE

CVE 编号：CVE-2026-55536

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-284

发布/更新时间：2026-08-25 / 2026-08-28

漏洞描述

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks Chrome extension origins with re.match() and the unanchored expression chrome-extension://[a-z0-9]{32}. Extra trailing characters pass before websocket.accept(), allowing start_session commands and unauthorized browser automation. This issue is fixed in version 4.6.58.

漏洞描述

相关链接

相关漏洞