CVE-2026-34936
Last modified
CVE-2026-34936 is a high-severity vulnerability rated 7.7/10 on the CVSS scale. PraisonAI is a multi-agent teams system. Prior to version 4.5.90, passthrough() and apassthrough() in praisonai accept a caller-controlled api_base parameter that is concatenated with endpoint and passed directly to httpx.Client.request() when the litellm primary path raises AttributeError. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, passthrough() and apassthrough() in praisonai accept a caller-controlled api_base parameter that is concatenated with endpoint and passed directly to httpx.Client.request() when the litellm primary path raises AttributeError. No URL scheme validation, private IP filtering, or domain allowlist is applied, allowing requests to any host reachable from the server. This issue has been patched in version 4.5.90.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Praison | Praisonai | < 4.5.90 |
References
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x6m9-gxvr-7jpvExploit, Vendor Advisory
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x6m9-gxvr-7jpvExploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-34936?
How severe is CVE-2026-34936?
How do I fix CVE-2026-34936?
Are you affected by CVE-2026-34936?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST