Server-Side Request Forgery Vulnerability in PraisonAI by Mervin Praison

CVE-2026-47390

What is CVE-2026-47390?

PraisonAI, a multi-agent team system, contains a vulnerability that allows attackers to bypass the URL validation mechanism. Specifically, before version 4.6.40 of PraisonAI, the URL validation function of the 'spider_tools' component inadequately restricts requests to unsafe targets. It only blocks a limited set of host strings like 'localhost' and '127.0.0.1', failing to normalize hostnames or validate DNS resolutions. This weakness means attackers can induce SSRF requests to loopback services by manipulating URLs passed to functions like 'scrape_page', 'crawl', or 'extract_text'. The flaw has been addressed in the recent updates to versions 4.6.40 for PraisonAI and 1.6.40 for praisonaiagents.

References