PT-2026-31997 · Mervinpraison · Praisonaiagents
Published
2026-04-10
·
Updated
2026-04-10
·
CVE-2026-40160
CVSS v4.0
7.1
High
| AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N |
PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, web crawl's httpx fallback path passes user-supplied URLs directly to httpx.AsyncClient.get() with follow redirects=True and no host validation. An LLM agent tricked into crawling an internal URL can reach cloud metadata endpoints (169.254.169.254), internal services, and localhost. The response content is returned to the agent and may appear in output visible to the attacker. This fallback is the default crawl path on a fresh PraisonAI installation (no Tavily key, no Crawl4AI installed). This vulnerability is fixed in 1.5.128.
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Praisonaiagents