CVE-2026-60091 ยท GHSA-4w49-gwv8-fpjg
PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF
- Risk score
- 62/100
- CVSS
- 7.2 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 10 Jul 2026
Open in the live forecast Today's forecast
What to know
- What it is
- PraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the Jobs API /api/v1/runs endpoint. The webhook_url parameter is validated at request time but re-resolved at connection time, allowing attackers to use DNS rebinding to reach internal services with a blind SSRF attack.
- Affected
- praisonai (pip) <= 4.6.77
- Fix
- Upgrade praisonai to 4.6.78 or later.
- Exploitation
- Public proof of concept
Why it is Amber
- CVSS 7.2 high
- Public exploit or proof of concept referenced
- Remotely exploitable without logging in
- On your watchlist: PyPI
Affected packages
| Package | Ecosystem | Vulnerable | Fixed in |
|---|---|---|---|
| praisonai | pip | <= 4.6.77 | 4.6.78 |
References
- https://github.com/advisories/GHSA-4w49-gwv8-fpjg
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4w49-gwv8-fpjg
- https://nvd.nist.gov/vuln/detail/CVE-2026-60091
- https://nvd.nist.gov/vuln/detail/CVE-2026-62175
- https://www.vulncheck.com/advisories/praisonai-before-unauthenticated-ssrf-via-webhook-url
- https://github.com/advisories/GHSA-4w49-gwv8-fpjg
Original description
PraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the Jobs API /api/v1/runs endpoint. The webhook_url parameter is validated at request time but re-resolved at connection time, allowing attackers to use DNS rebinding to reach internal services with a blind SSRF attack.
Last activity 8 Oct 2026. Patch Forecast updates every hour.