CVE-2026-57114
PraisonAI is a multi-agent teams system
- Risk score
- 51/100
- CVSS
- 7.2 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 23 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network r…
- Affected
- See advisory
- Fix
- Upgrade the product to 4.6.59 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 7.2 high
- Remotely exploitable without logging in
References
Original description
PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network request. When a job completes, _send_webhook() passes the original hostname to httpx.AsyncClient.post() with no send-time validation, IP pinning, or guarded transport. An attacker-controlled hostname can therefore resolve to a public IP during Pydantic validation and later resolve to loopback/private/cloud-metadata infrastructure during webhook delivery. This bypasses the intended SSRF guard in current supported releases. This appears to be an incomplete fix / patch bypass for GHSA-8frj-8q3m-xhgm. This issue has been patched in version 4.6.59.
Last activity 23 Oct 2026. Patch Forecast updates every hour.