CVE-2026-55526
Received Received - Intake

DNS Misconfiguration in PraisonAI Allows Internal HTTP Access

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resolve ordinary hostnames before scrape_page fetches them. A hostname such as 127.0.0.1.nip.io passes validation and resolves to loopback, permitting internal HTTP access. The fix uses socket.getaddrinfo and fails closed on DNS errors. This issue is fixed in version 1.6.58.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-55526
EUVD
EUVD-2026-65499

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
praisonai praisonaiagents 1.6.58
mervinpraison praisonaiagents 1.6.58
mervinpraison praisonai 4.6.58

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
CWE-350 The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-55526 is a Server-Side Request Forgery (SSRF) vulnerability in the PraisonAI library affecting versions before 1.6.58. The issue is in the _host_is_blocked() function which fails to resolve hostnames before fetching pages. This allows attackers to bypass SSRF protections using hostnames like 127.0.0.1.nip.io that resolve to internal IPs.

Detection Guidance

Check for unauthorized access to internal services by monitoring network traffic for requests to localhost or private IP ranges. Inspect logs for URLs containing patterns like .nip.io or similar DNS tricks. Verify if praisonaiagents versions are below 1.6.58.

Impact Analysis

An attacker could exploit this to access internal services or sensitive data like database passwords or cloud credentials. In cloud environments like AWS EC2, this could lead to full account compromise. The vulnerability affects tools like scrape_page and crawl that process user-supplied URLs.

Compliance Impact

This SSRF vulnerability could lead to unauthorized access to internal services, potentially exposing sensitive data such as database passwords or cloud credentials. This may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Upgrade praisonaiagents to version 1.6.58 or later immediately. Review and restrict access to agent tools like scrape_page and crawl. Implement network-level controls to block outbound requests to localhost or private IPs from application servers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55526. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart