VYPR

ToolsMCPServer

by PraisonAI

CVEs (1)

  • CVE-2026-57112higJun 18, 2026
    risk 0.45cvss epss

    # PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools ## Summary `praisonaiagents.mcp.ToolsMCPServer.run_sse()` builds a Starlette MCP HTTP+SSE server around `mcp.server.sse.SseServerTransport`. The server exposes `/sse` and…