THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-55536 (CRITICAL 9.1) — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks Chrome extension origins with re.match() and the unanchored expression chrome-extension://[a-z0-9]{32}. Extra trailing characters pass before websocket.accept(), allowin

[NVD] CVE-2026-55536 (CRITICAL 9.1) — PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks Chrome extension origins with re.match() and the unanchored expression chrome-extension://[a-z0-9]{32}. Extra trailing characters pass before websocket.accept(), allowin

mednvdPublished 2026-08-25

CVE-2026-55536 CVSS: 9.1 CRITICAL Published: 2026-08-25T16:16:54.867

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks Chrome extension origins with re.match() and the unanchored expression chrome-extension://[a-z0-9]{32}. Extra trailing characters pass before websocket.accept(), allowing start_session commands and unauthorized browser

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-55536