CVE-2026-55525
Received Received - Intake

PraisonAI Web Crawl Redirect Validation Bypass

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the web_crawl function validates only the initial URL before _crawl_with_httpx uses httpx.Client(follow_redirects=True). Redirect targets are not revalidated, so an attacker who influences a crawl target can redirect a public URL to loopback, private network, or cloud metadata services while ALLOW_LOCAL_CRAWL remains disabled. The fetched internal response is returned to the agent context. This issue is fixed in version 1.6.58.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-55525
EUVD
EUVD-2026-65493

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
mervinpraison praisonaiagents to 1.6.52 (exc)
mervinpraison praisonai 4.6.58
praisonai praisonaiagents 1.6.58

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-55525 is a Server-Side Request Forgery (SSRF) vulnerability in the PraisonAI praisonaiagents package. It affects versions before 1.6.58. The web_crawl function only validates the initial URL before using httpx.Client with follow_redirects=True. Redirect targets are not revalidated, allowing attackers to redirect public URLs to internal, loopback, or private network services. The fetched internal response is then exposed to the agent.

Detection Guidance

Check if PraisonAI versions prior to 1.6.58 are installed by running: pip show praisonaiagents. Inspect web_crawl function logs for redirects to internal addresses like 127.0.0.1, 169.254.169.254, or private network ranges.

Impact Analysis

An attacker could exploit this to access sensitive internal data such as cloud metadata services (e.g., 169.254.169.254) or localhost admin services. This could expose IAM credentials or other confidential information. The vulnerability requires no privileges or user interaction and has a high severity rating.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements for protected health information. Organizations using affected versions may face compliance violations, legal penalties, and reputational damage due to potential data breaches.

Mitigation Strategies

Upgrade praisonaiagents to version 1.6.58 or later. Disable ALLOW_LOCAL_CRAWL if enabled. Monitor network traffic for unexpected outbound requests to internal or cloud metadata services.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55525. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart