CVE-2026-62175

Name of the Vulnerable Software and Affected Versions praisonai version 4.6.63

Description The Async Jobs API fails to enforce authentication by default, as the API-key middleware is only active when the PRAISONAI JOBS API KEY environment variable is set. This allows unauthenticated access to the POST /api/v1/runs endpoint, where an attacker can provide a malicious webhook url via the webhook url parameter. Although a validator exists in the validate webhook url() function to block private IP addresses, it is susceptible to a DNS-rebinding Time-of-Check to Time-of-Use (TOCTOU) flaw. The validator resolves the hostname at the time of the request, but the send webhook() function re-resolves the hostname during the actual connection using httpx, allowing requests to bypass the filter and reach internal services. This results in an unauthenticated, blind Server-Side Request Forgery (SSRF).

Recommendations For version 4.6.63, authenticate the Jobs API by default by auto-generating a token or failing closed when binding to non-loopback addresses. For version 4.6.63, modify the webhook url handling to resolve the hostname once, reject private, loopback, CGNAT, or metadata addresses, and then pin the connection to that validated IP while disabling redirects.