Cloudanix VulnDB

GHSA-8x8f-54wf-vv92

Critical · 9.1

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

CVSS

9.1

EPSS

—

Published

Apr 10, 2026

CISA due date

—

The record

`praisonai browser start` exposes the browser bridge on `0.0.0.0` by default, and its `/ws` endpoint accepts websocket clients that omit the `Origin` header entirely. An unauthenticated network client can connect as a fake controller, send `start_session`, cause the server to forward `start_automation` to another connected browser-extension websocket, and receive the resulting action/status stream back over that hijacked session. This allows unauthorized remote use of a connected browser automation session without any credentials.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities