DEV Community

CVE Reports
CVE Reports

Posted on Originally published at cvereports.com

CVE-2026-55537: CVE-2026-55537: Webhook Server-Side Request Forgery and TOCTOU Bypass in PraisonAI

#security #cve #cybersecurity

CVE-2026-55537: Webhook Server-Side Request Forgery and TOCTOU Bypass in PraisonAI

Vulnerability ID: CVE-2026-55537
CVSS Score: 7.1
Published: 2026-08-25

CVE-2026-55537 is a server-side request forgery (SSRF) and time-of-check time-of-use (TOCTOU) vulnerability in the PraisonAI multi-agent framework before version 4.6.58. The flaw exists in the job-submission component's webhook URL validation logic. When DNS resolution fails during verification, the application fails open, enabling attackers to register unresolvable URLs. When a completed job triggers the webhook, the application performs a fresh DNS resolution that attackers can manipulate to target internal resources.

TL;DR

A fail-open DNS resolution handler in PraisonAI's webhook validator enables attackers to bypass SSRF protections via a TOCTOU mechanism, targeting protected internal network endpoints.

⚠️ Exploit Status: POC

Technical Details

  • CWE ID: CWE-918, CWE-367, CWE-705
  • Attack Vector: Network (AV:N)
  • CVSS v3.1 Score: 7.1 (High)
  • Exploit Status: poc
  • KEV Status: Not Listed
  • Scope Impact: Changed (S:C)

Affected Systems

  • PraisonAI Multi-Agent Framework
  • PraisonAI: < 4.6.58 (Fixed in: 4.6.58)

Code Analysis

Commit: 2f9677a

Refactor input validation and implement fail-closed validation for webhook URLs in JobSubmitRequest models

Mitigation Strategies

  • Upgrade the PraisonAI package to version 4.6.58 or higher.
  • Deploy network-level egress filtering rules to drop connections targeting private or loopback interfaces from the application host.
  • Configure DNS caching proxies to enforce minimum TTL constraints on resolved domains.

Remediation Steps:

  1. Run the pip upgrade command: pip install --upgrade praisonai
  2. Verify the installed version is 4.6.58 or later by running pip show praisonai
  3. Update firewall configurations (iptables, AWS Security Groups) to block traffic from the PraisonAI container to the metadata endpoint 169.254.169.254 and RFC 1918 IP ranges.

References

Read the full report for CVE-2026-55537 on our website for more details including interactive diagrams and full exploit analysis.

Top comments (0)