CVE-2026-34954
Server-Side Request Forgery in PraisonAI FileTools.download_file
Publication date: 2026-04-03
Last updated on: 2026-04-13
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| praison | praisonaiagents | to 1.5.95 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-918 | The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability exists in PraisonAI's multi-agent teams system, specifically in the FileTools.download_file() function of praisonaiagents before version 1.5.95. While the destination path is validated, the URL parameter is not validated and is passed directly to httpx.stream() with follow_redirects enabled. This allows an attacker who controls the URL to make the server access any host reachable from it, including sensitive internal network services and cloud metadata services.
How can this vulnerability impact me? :
This vulnerability can have a significant impact because an attacker can exploit it to make the server access internal or cloud metadata services that are normally protected. This could lead to unauthorized access to sensitive information or internal resources. The CVSS score of 8.6 indicates a high severity with potential for high confidentiality impact.
What immediate steps should I take to mitigate this vulnerability?
The vulnerability has been patched in PraisonAI version 1.5.95. The immediate step to mitigate this vulnerability is to upgrade the praisonaiagents component to version 1.5.95 or later.