Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.7

PraisonAI agents can be tricked to access internal network

CVE-2026-44335 · published 6 months ago
Summary

Versions of PraisonAI agents before 1.6.32 let an attacker bypass URL checks, allowing the system to reach internal services or other restricted resources. This could expose sensitive data or enable further attacks inside your network. Upgrade to version 1.6.32 or later to close the gap.

What to do
  • Update mervin praison praisonaiagents to version 1.6.32.
  • Update praison praisonaiagents to version 1.6.32 or later.
Affected software
Ecosystem VendorProductAffected versions
pip mervin praison praisonaiagents <= 1.6.31
Fix: upgrade to 1.6.32
– praison praisonaiagents < 1.6.32
cpe:2.3:a:praison:praisonaiagents:*:*:*:*:*:python:*:*
Original advisory text
PraisonAI has an SSRF bypass
PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published8 May 2026
Updated4 Nov 2026
First seen6 May 2026
Sources
GHSA-q9pw-vmhh-384g · GHSA
CVE-2026-44335 · NVD
Track software like this
Free during beta