CyberRota Analysis
AI-GeneratedThe vulnerability affects PraisonAI's web_crawl function, which inadequately validates redirect targets, allowing an attacker to manipulate crawl targets and redirect requests to internal resources or metadata services. This could lead to unauthorized access to sensitive internal data, particularly if the ALLOW_LOCAL_CRAWL setting is disabled. Organizations using versions prior to 1.6.58 should prioritize updating to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the web_crawl function validates only the initial URL before _crawl_with_httpx uses httpx.Client(follow_redirects=True). Redirect targets are not revalidated, so an attacker who influences a crawl target can redirect a public URL to loopback, private network, or cloud metadata services while ALLOW_LOCAL_CRAWL remains disabled. The fetched internal response is returned to the agent context. This issue is fixed in version 1.6.58.