PT-2026-61780 · Pypi+1 · Praisonaiagents+1
CVE-2026-57126
·
Published
2026-06-18
·
Updated
2026-07-23
CVSS v3.1
8.5
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
praisonaiagents versions 1.6.39 and earlier
PraisonAI versions 4.6.39 and earlier
Description
A Server-Side Request Forgery (SSRF) issue exists because the SSRF guard only validates literal IP address encodings and does not perform DNS resolution. This allows any hostname that resolves to an internal, loopback, link-local, or cloud-metadata address to bypass validation. The issue affects the
host is blocked function within SpiderTools. validate url in praisonaiagents/tools/spider tools.py and the @url mention fetch in praisonaiagents/tools/mentions.py. An attacker can use a domain they control with an A record pointing to a forbidden internal address to steal cloud metadata or access internal services. The vulnerability is triggered through the scrape page, crawl, extract links, and extract text tools, as well as the fetch url function.Recommendations
For praisonaiagents versions 1.6.39 and earlier, resolve the host using
socket.getaddrinfo and apply the ip blocked check to every resolved address before fetching, and pin the connection to the validated address to prevent DNS rebinding.
For PraisonAI versions 4.6.39 and earlier, resolve the host using socket.getaddrinfo and apply the ip blocked check to every resolved address before fetching, and pin the connection to the validated address to prevent DNS rebinding.
As a temporary mitigation, restrict the use of the scrape page, crawl, extract links, and extract text tools and avoid using the @url mention feature.Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Praisonai
Praisonaiagents