CVE-2026-55537

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58

Description A Server-Side Request Forgery (SSRF) issue exists due to a Time-of-Check to Time-of-Use (TOCTOU) flaw and a fail-open DNS validation mechanism. The JobSubmitRequest.validate webhook url() function validates webhook URLs by resolving the hostname to check for private IP addresses; however, if a DNS resolution error occurs (socket.gaierror), the validator silently allows the URL. Subsequently, the JobExecutor. send webhook() function performs a fresh DNS lookup at execution time. An attacker can exploit this by submitting a webhook url that initially does not resolve to bypass validation and then updating the DNS to point to an internal IP address, directing the final request to an internal service. This can lead to the exfiltration of job results or unauthorized interaction with internal infrastructure.

Recommendations Update PraisonAI to version 4.6.58. As a temporary mitigation, restrict access to the POST /jobs endpoint to trusted callers only.