CVE-2026-55537
Received Received - Intake

PraisonAI Agent Webhook URL DNS Redirection Vulnerability

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webhook_url when resolution raises socket.gaierror because the exception path uses except socket.gaierror: pass. JobExecutor._send_webhook() later performs a fresh lookup, allowing DNS changes to direct the request to an internal service. This issue is fixed in version 4.6.58.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-55537
EUVD
EUVD-2026-65515

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
praisonai praisonai 4.6.58
mervinpraison praisonai 4.6.58
mervinpraison praisonai to 4.6.52 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-367 The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
CWE-705 The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-55537 is a Server-Side Request Forgery (SSRF) vulnerability in PraisonAI versions 4.6.52 and earlier. It occurs due to a Time-of-Check Time-of-Use (TOCTOU) race condition in webhook URL validation and execution. During validation, if DNS resolution fails, the system silently accepts the URL. Later, when executing the webhook, a fresh DNS lookup is performed, allowing attackers to redirect requests to internal services by changing DNS records after validation.

Detection Guidance

To detect this vulnerability, monitor network traffic for unexpected outbound requests to internal IP addresses or services. Check logs for webhook URLs pointing to non-resolving domains that later resolve to private IPs. Inspect PraisonAI logs for JobSubmitRequest and JobExecutor events during validation and execution phases.

Impact Analysis

This vulnerability allows attackers to send requests to internal services, potentially exposing sensitive data or interacting with internal systems. It could lead to unauthorized access, data exfiltration, or even code execution if internal services interpret malicious payloads as commands. The impact depends on the internal services accessible via the vulnerable webhook mechanism.

Compliance Impact

This vulnerability could lead to unauthorized access to internal systems and data exfiltration, which may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data privacy). Organizations using affected PraisonAI versions may face regulatory penalties if internal data is compromised due to this flaw.

Mitigation Strategies

Upgrade PraisonAI to version 4.6.58 or later to apply the patch. Ensure DNS resolution failures during validation trigger a reject instead of passing silently. Re-validate webhook URLs at execution time to prevent DNS rebinding attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55537. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart