CVE-2026-55524

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.6.58

Description The web crawl tool contains a Server-Side Request Forgery (SSRF) flaw. The system performs a security check on the initial URL by resolving the hostname via socket.gethostbyname() to reject private, loopback, or link-local addresses. However, the URL is subsequently passed to a fetcher using httpx.Client(follow redirects=True) or urllib.request.urlopen, both of which follow redirects and re-resolve the hostname without further validation. This discrepancy allows an attacker to bypass protections using HTTP redirects or DNS rebinding. By influencing URLs passed to the web crawl() function, an attacker can force the host to fetch data from loopback, private-network, or cloud metadata endpoints, returning the response body in the tool result.

Recommendations Update to version 1.6.58. As a temporary workaround, restrict the use of the web crawl() function until the update is applied.