CVE-2026-57126 Details
Description
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, SpiderTools._validate_url calls _host_is_blocked, which checks literal host encodings but does not resolve DNS names before scrape_page, crawl, extract_links, extract_text, or URL-mention fetches connect. An attacker-controlled hostname resolving to a loopback, private, link-local, or cloud-metadata address therefore bypasses the SSRF policy without a rebinding race and can expose internal responses to the agent. This issue is fixed in praisonaiagents 1.6.58.
A server-side request forgery (SSRF) vulnerability has been identified in PraisonAI, specifically within the web crawling and mention-fetching tools of the agent system. This issue, present in PraisonAI agents versions through 1.6.48, arises because the URL validation process only checks literal host encodings for private or loopback addresses without resolving DNS names. As a result, an attacker can manipulate hostnames to bypass SSRF protections and access internal resources via the agent's response-extraction capabilities.
Users can update to PraisonAI agents version 1.6.59 or later, where this vulnerability has been addressed. Instructions for updating can be found in the PraisonAI repository on GitHub.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 14, 2026CISA-ADP
Assessed Sep 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vxgj-xg5c-p4h7 | CISA-ADP | AdvisoryRemedyVendor |
| https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1 | [email protected] | Source CodeVendor |
| https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58 | [email protected] | Vendor |
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vxgj-xg5c-p4h7 | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MervinPraison/PraisonAI | <= 4.6.39 (semver) |
CPE
Remediation
| |
| MervinPraison/praisonaiagents | <= 1.6.48 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 14, 2026 | CVE Modified | CISA-ADP |
| Sep 14, 2026 | New CVE Received | [email protected] |