CVE-2026-40160
Last modified
CVE-2026-40160 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, web_crawl's httpx fallback path passes user-supplied URLs directly to httpx.AsyncClient.get() with follow_redirects=True and no host validation. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, web_crawl's httpx fallback path passes user-supplied URLs directly to httpx.AsyncClient.get() with follow_redirects=True and no host validation. An LLM agent tricked into crawling an internal URL can reach cloud metadata endpoints (169.254.169.254), internal services, and localhost. The response content is returned to the agent and may appear in output visible to the attacker. This fallback is the default crawl path on a fresh PraisonAI installation (no Tavily key, no Crawl4AI installed). This vulnerability is fixed in 1.5.128.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Praison | Praisonaiagents | < 1.5.128 |
References
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qq9r-63f6-v542Exploit, Vendor Advisory
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qq9r-63f6-v542Exploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-40160?
How severe is CVE-2026-40160?
How do I fix CVE-2026-40160?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-40155The Auth0 Next.js SDK is a library for implementing user aut…5.4
- CVE-2026-40156PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…7.8
- CVE-2026-40157PraisonAI is a multi-agent teams system. Prior to 4.5.128, c…8.8
- CVE-2026-40158PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…7.8
- CVE-2026-40159PraisonAI is a multi-agent teams system. Prior to 4.5.128, P…5.5
- CVE-2026-4016A security vulnerability has been detected in GPAC 26.03-DEV…5.3
- CVE-2026-40161Tekton Pipelines project provides k8s-style resources for de…6.5
- CVE-2026-40162Bugsink is a self-hosted error tracking tool. In 2.1.0, an a…7.1
- CVE-2026-40163Saltcorn is an extensible, open source, no-code database app…8.2
- CVE-2026-40164jq is a command-line JSON processor. Before commit 0c7d133c3…7.5
- CVE-2026-40165authentik is an open-source identity provider. Versions 2025…8.7
- CVE-2026-40166authentik is an open-source identity provider. In versions p…7.1
Are you affected by CVE-2026-40160?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST