CyberRota Analysis
AI-GeneratedPraisonAI versions prior to 1.6.58 are vulnerable to a Server-Side Request Forgery (SSRF) flaw that allows attackers to manipulate hostname resolutions, potentially exposing internal system responses. This vulnerability can be exploited to access sensitive data by redirecting requests to loopback or private addresses. Organizations using affected versions of PraisonAI should prioritize updating to version 1.6.58 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, SpiderTools._validate_url calls _host_is_blocked, which checks literal host encodings but does not resolve DNS names before scrape_page, crawl, extract_links, extract_text, or URL-mention fetches connect. An attacker-controlled hostname resolving to a loopback, private, link-local, or cloud-metadata address therefore bypasses the SSRF policy without a rebinding race and can expose internal responses to the agent. This issue is fixed in praisonaiagents 1.6.58.