PT-2026-31789 · Unknown · Praisonaiagents

Published 2026-04-09 · Updated 2026-04-10 · CVE-2026-40150

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PraisonAIAgents versions prior to 1.5.128

Description PraisonAIAgents is a multi-agent teams system. The web crawl() function in praisonaiagents/tools/web crawl tools.py accepts arbitrary URLs from AI agents without validation. This includes a lack of scheme allowlisting, hostname/IP blocklisting, or private network checks before fetching. This allows an attacker, or through prompt injection in crawled content, to force the agent to fetch cloud metadata endpoints, internal services, or local files via file:// URLs.

Recommendations Update PraisonAIAgents to version 1.5.128 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-40150

GHSA-8F4V-XFM9-3244

Affected Products

Praisonaiagents

References · 7

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8f4v-xfm9-3244 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-40150 · Security Note
• https://osv.dev/vulnerability/GHSA-8f4v-xfm9-3244 · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI · Note
• https://twitter.com/VulmonFeeds/status/2042426096159793316 · Twitter Post
• https://twitter.com/theagentcop/status/2042399598623269205 · Twitter Post
• https://twitter.com/CVEnew/status/2042561831030657205 · Twitter Post