PT-2026-29830 · Httpx+1 · Httpx+1

Yerang30 · Published 2026-04-01 · Updated 2026-04-14 · CVE-2026-34954

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.5.95

Description PraisonAI's FileTools.download file() function does not validate the url parameter before passing it to httpx.stream() with follow redirects=True. This allows an attacker controlling the URL to access any host accessible from the server, including cloud metadata services and internal network services. The vulnerability can be exploited through open-redirect chaining, bypassing partial URL filters. On cloud infrastructure with IMDSv1 enabled, an attacker can potentially retrieve IAM credentials and write them to disk. The vulnerable code is located in file tools.py lines 259 and 296. The url parameter is taken directly from the caller without validation and then passed to httpx.stream() without proper sanitization.

Recommendations Update PraisonAI to version 1.5.95 or later.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-34954

GHSA-44C2-3RW4-5GVH

Affected Products

Praisonai

Httpx

References · 7

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-44c2-3rw4-5gvh · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-44c2-3rw4-5gvh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34954 · Security Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://twitter.com/giuseppe_1337/status/2043861201436692649 · Twitter Post
• https://twitter.com/TheHackerWire/status/2040278151042048181 · Twitter Post
• https://twitter.com/CveFindCom/status/2040205811192865058 · Twitter Post