{"id":"CVE-2026-57114","title":"PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding","summary":"PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again when the internal Job object is constructed. That validation …","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","cvssSource":"cna","cwe":["CWE-367","CWE-918"],"vendor":"MervinPraison","product":"PraisonAI","affected":["PraisonAI >= 4.5.126, < 4.6.59"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T12:04:29.966Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-57114","references":[{"url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rjvw-7vvw-549v","label":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rjvw-7vvw-549v"},{"url":"https://github.com/MervinPraison/PraisonAI"}],"tags":["cve.org","osv","pip"],"aliases":["GHSA-rjvw-7vvw-549v"],"ecosystem":"pip","patched":["praisonai 4.6.59"],"ingestedAt":"2026-07-21T19:04:57.589Z","epss":0.00187,"epssPercentile":0.08205,"slug":"CVE-2026-57114","body":"## Overview\n\nPraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network request. When a job completes, _send_webhook() passes the original hostname to httpx.AsyncClient.post() with no send-time validation, IP pinning, or guarded transport. An attacker-controlled hostname can therefore resolve to a public IP during Pydantic validation and later resolve to loopback/private/cloud-metadata infrastructure during webhook delivery. This bypasses the intended SSRF guard in current supported releases. This appears to be an incomplete fix / patch bypass for GHSA-8frj-8q3m-xhgm. This issue has been patched in version 4.6.59.\n\n## Affected\n\n- `PraisonAI >= 4.5.126, < 4.6.59`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-57114)\n\nAffected packages:\n\n- `praisonai >= 4.5.126, < 4.6.59`\n\nPatched in:\n\n- `praisonai 4.6.59`\n\nSource: https://osv.dev/vulnerability/GHSA-rjvw-7vvw-549v","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}