CVE-2026-34954 Details
Description
PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.
A server-side request forgery (SSRF) vulnerability has been identified in the PraisonAI multi-agent teams system, specifically in the FileTools.download_file() function of the praisonaiagents package, prior to version 1.5.95. The vulnerability arises because the function validates the destination path but fails to properly validate the URL parameter. This unvalidated URL is then passed directly to httpx.stream() with follow_redirects enabled. As a result, an attacker controlling the URL can access any host reachable from the server, including cloud metadata services and internal network services. On cloud environments with IMDSv1 enabled, this could allow retrieval of sensitive IAM credentials via the EC2 metadata service.
Users are advised to update to PraisonAI version 1.5.95 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-44c2-3rw4-5gvh | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| praison praisonaiagents | < 1.5.95 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 13, 2026 | Reanalysis | [email protected] |
| Apr 9, 2026 | Initial Analysis | [email protected] |
| Apr 3, 2026 | New CVE Received | [email protected] |