PT-2026-29823 · Httpx+2 · Httpx+2

Yerang30 · Published 2026-04-01 · Updated 2026-04-03 · CVE-2026-34936

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.90

Description PraisonAI's passthrough() and apassthrough() functions accept a caller-controlled api base parameter. This parameter is concatenated with the endpoint and passed directly to httpx.Client.request() when an AttributeError occurs in the litellm primary path. The system lacks URL scheme validation, private IP filtering, or a domain allowlist, enabling requests to any reachable host. The functions passthrough() and apassthrough() are vulnerable. The vulnerable code is located in passthrough.py lines 92, 109, and 110. An attacker can potentially retrieve IAM credentials on cloud infrastructure with IMDSv1 enabled, and access internal services without authentication within a VPC.

Recommendations Update PraisonAI to version 4.5.90 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-34936

GHSA-X6M9-GXVR-7JPV

Affected Products

Praisonai

Httpx

Litellm

References · 4

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x6m9-gxvr-7jpv · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-34936 · Security Note
• https://osv.dev/vulnerability/GHSA-x6m9-gxvr-7jpv · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI · Note