CVE-2026-57126
Deferred Deferred - Pending Action

SSRF Bypass in PraisonAI via Hostname Resolution

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: GitHub, Inc.

Description
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, SpiderTools._validate_url calls _host_is_blocked, which checks literal host encodings but does not resolve DNS names before scrape_page, crawl, extract_links, extract_text, or URL-mention fetches connect. An attacker-controlled hostname resolving to a loopback, private, link-local, or cloud-metadata address therefore bypasses the SSRF policy without a rebinding race and can expose internal responses to the agent. This issue is fixed in praisonaiagents 1.6.58.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-57126
EUVD
EUVD-2026-77542

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
praisonai praisonaiagents 1.6.58
mervinpraison praisonaiagents 1.6.58
mervinpraison praisonaiagents to 1.6.48 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an insufficient Server-Side Request Forgery (SSRF) guard in PraisonAI's praisonaiagents package. The system checks literal host encodings but fails to resolve DNS names before making requests. Attackers can bypass SSRF protections by using hostnames that resolve to internal, loopback, or cloud-metadata addresses like 127.0.0.1 or AWS metadata endpoints.

Detection Guidance

To detect this SSRF vulnerability in PraisonAI, monitor network traffic for outbound connections to loopback, private, link-local, or cloud-metadata addresses from the praisonaiagents process. Check logs for attempts to access 127.0.0.1, 169.254.169.254, or other internal IPs via tools like scrape_page, crawl, or URL mentions. Use tools like tcpdump or Wireshark to capture traffic from the application.

Impact Analysis

An attacker could exploit this to access internal services, cloud metadata, or private network resources without authentication. This could lead to data leaks, unauthorized actions, or further network compromise. The impact is high severity with a CVSS score of 8.5.

Compliance Impact

This vulnerability could violate compliance requirements by allowing unauthorized access to sensitive data or systems. GDPR may be breached if personal data is exposed, while HIPAA could be violated if protected health information is accessed. Organizations must address this to maintain regulatory compliance.

Mitigation Strategies

Immediately upgrade praisonaiagents to version 1.6.58 or later to apply the SSRF fix. If upgrading is not possible, restrict outbound network access for the praisonaiagents process using firewall rules to block connections to internal, loopback, and cloud-metadata addresses. Disable high-risk tools like scrape_page, crawl, and URL mentions if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57126. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart