SSRF in Mervinpraison Praisonai
CVE-2026-55523
PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.web_crawl_tools.web_crawl() function is vulnerable to server-side request forgery. While it validates the initially supplied URL and blo…
Vulnerability class: SSRF (Server-Side Request Forgery)
Affected products
- Mervinpraison Praisonai — versions >= 1.5.128, < 1.6.58
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)