GHSA-pvph-5j39-v8qc: PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server

PraisonAI's HTTP server has a flaw in how it checks which websites are allowed to make requests to it, using a prefix match that allows attackers to bypass it by registering domains like 'localhost.attacker.com'. Combined with no default authentication and no requirement for session validation, an attacker can trick a victim into visiting a malicious webpage that silently makes requests to the victim's local PraisonAI server to create rules that inject the attacker's instructions into all future agent runs on that machine.