CVE-2026-56837 MervinPraison CVE debrief

Who should care

Defenders responsible for PraisonAI deployments, particularly those using LinearBot, should assess exposure and prioritize verification and remediation. This includes reviewing the current version of PraisonAI and LinearBot, identifying potentially affected systems, and planning for upgrades or mitigations as necessary.

Why it matters

CVE-2026-56837 allows an unauthenticated network caller to submit a forged Linear-Event: AgentSession request, potentially leading to security consequences. Defenders should prioritize verification and remediation.

• Verify and upgrade to PraisonAI version 4.6.59 or later to prevent exploitation
• Restrict network access to the webhook endpoint to limit attack surface
• Monitor for suspicious activity to detect potential exploitation

Technical summary

PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing, allowing an unauthenticated network caller to submit a forged Linear-Event: AgentSession request. This occurs because the LinearBot starts a public webhook listener on 0.0.0.0 and treats LINEAR_WEBHOOK_SECRET as optional. When the secret is absent, startup only logs a warning and _handle_webhook() skips Linear-Signature verification entirely. The forged request is parsed, scheduled for background processing, dispatched to _handle_agent_session(), and passed into BotSessionManager.chat().

Defensive priority

Defenders should prioritize verifying and upgrading to PraisonAI version 4.6.59 or later, and restrict network access to the webhook endpoint.

Recommended defensive actions

• Verify and upgrade to PraisonAI version 4.6.59 or later
• Restrict network access to the webhook endpoint
• Monitor for suspicious activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details on the vulnerability, including the affected versions (PraisonAI 4.6.56 to before 4.6.59) and patch information (version 4.6.59). The LinearBot's webhook listener is started on 0.0.0.0 and treats LINEAR_WEBHOOK_SECRET as optional. When the secret is absent, startup only logs a warning and _handle_webhook() skips Linear-Signature verification entirely. An unauthenticated network caller who can reach the webhook endpoint can submit a forged Linear-Event: AgentSession request.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.