CVE-2026-40160

Name of the Vulnerable Software and Affected Versions PraisonAIAgents versions prior to 1.5.128

Description The web crawl tool contains a Server-Side Request Forgery (SSRF) flaw in its httpx fallback path. This path is active by default on fresh installations where no TAVILY API KEY is set and the crawl4ai package is not installed. The issue occurs because user-supplied URLs are passed directly to httpx.AsyncClient.get() with follow redirects=True without any host validation, scheme restriction, or private IP checks. An attacker can trick an LLM agent into crawling internal URLs, allowing access to localhost, internal services, and cloud metadata endpoints such as 169.254.169.254. This can lead to the exposure of sensitive information, including IAM credentials on cloud infrastructure using IMDSv1. The vulnerability is located in the crawl with httpx() function within tools/web crawl tools.py and involves the url variable.

Recommendations Update PraisonAIAgents to version 1.5.128. As a temporary mitigation, ensure that a TAVILY API KEY is configured or the crawl4ai package is installed to disable the vulnerable httpx fallback path.