CVE-2026-55535
Received Received - Intake

Path Traversal in PraisonAI Jobs API

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhook_url can later resolve to 127.0.0.1, 169.254.169.254, or another internal address. This issue is fixed in version 4.6.58.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-55535
EUVD
EUVD-2026-65516

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
praisonai praisonai 4.6.58
mervinpraison praisonai 4.6.58
mervinpraison praisonai From 4.6.48 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-367 The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in PraisonAI versions before 4.6.58 involves a failure in the Jobs API's webhook URL validation. When DNS resolution fails, the system does not properly validate the address, allowing an attacker to bypass security checks. The validator should block private or loopback IPs but ignores failures like socket.gaierror, enabling DNS rebinding attacks or direct access to internal services.

Detection Guidance

Monitor network traffic for unexpected outbound connections to internal IP ranges like 127.0.0.1, 169.254.169.254, or other private addresses. Check PraisonAI logs for failed webhook validations or DNS resolution errors. Use tools like tcpdump or Wireshark to inspect traffic from the PraisonAI process.

Impact Analysis

An attacker could exploit this to access internal HTTP services such as admin panels, databases, or cloud metadata APIs (e.g., 169.254.169.254). This could lead to unauthorized data exposure, service manipulation, or further network compromise within your environment.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Organizations may face compliance breaches, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Upgrade PraisonAI to version 4.6.58 or later immediately. Disable or restrict access to the Jobs API if not required. Implement network-level controls to block outbound connections to internal IP ranges from the PraisonAI server. Review and validate all webhook URLs manually before use.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55535. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart