PT-2026-31783 · Praisonai+1 · Praisonai+1

CVE-2026-40114 · Published 2026-04-09 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.128

Description PraisonAI is a multi-agent teams system. The /api/v1/runs endpoint accepts an arbitrary webhook url in the request body without URL validation. Upon job completion (success or failure), the server sends an HTTP POST request to this URL using httpx.AsyncClient. This allows an unauthenticated attacker to make the server send POST requests to arbitrary internal or external destinations, potentially enabling Server-Side Request Forgery (SSRF) against cloud metadata services, internal APIs, and other network-adjacent services.

Recommendations Update PraisonAI to version 4.5.128 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-40114

GHSA-8FRJ-8Q3M-XHGM

PYSEC-2026-2906

Affected Products

Praisonai

Httpx

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40114.json · Exploit
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8frj-8q3m-xhgm · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2906 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40114 · Security Note
• https://osv.dev/vulnerability/CVE-2026-40114 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8frj-8q3m-xhgm · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128 · Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://twitter.com/infoflowcloud/status/2042562321315213453 · Twitter Post
• https://twitter.com/CVEnew/status/2042561841432531320 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2042428655788343313 · Twitter Post
• https://github.com/advisories/GHSA-8frj-8q3m-xhgm · Note
• https://pypi.org/project/praisonai · Note