CVE-2026-57114

PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network request. When a job completes, _send_webhook() passes the original hostname to httpx.AsyncClient.post() with no send-time validation, IP pinning, or guarded transport. An attacker-controlled hostname can therefore resolve to a public IP during Pydantic validation and later resolve to loopback/private/cloud-metadata infrastructure during webhook delivery. This bypasses the intended SSRF guard in current supported releases. This appears to be an incomplete fix / patch bypass for GHSA-8frj-8q3m-xhgm. This issue has been patched in version 4.6.59.

• CWE-367
• CWE-918

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rjvw-7vvw-549v
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rjvw-7vvw-549v

Published

Oct 23, 2026

Last Modified

Oct 29, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57107Improper authentication in Windows Admin Center allows an au…7.8
• CVE-2026-57108Access of resource using incompatible type ('type confusion'…7.5
• CVE-2026-5711The Post Blocks & Tools plugin for WordPress is vulnerable t…6.4
• CVE-2026-57111Permissive Cross-Origin Resource Sharing (CORS) in the REST …7.5
• CVE-2026-57112PraisonAI is a multi-agent teams system. From praisonaiagent…8.3
• CVE-2026-57113PraisonAI is a multi-agent teams system. From version 2.6.0 …8.1
• CVE-2026-57115PraisonAI is a multi-agent teams system. Prior to praisonaia…6.5
• CVE-2026-57116PraisonAI is a multi-agent teams system. From version 4.2.1 …9.8
• CVE-2026-57117PraisonAI is a multi-agent teams system. From version 4.6.10…8.8
• CVE-2026-57118PraisonAI is a multi-agent teams system. Prior to praisonaia…9.8
• CVE-2026-57119PraisonAI is a multi-agent teams system. Prior to 4.6.59, th…7.5
• CVE-2026-5712This vulnerability impacts all versions of IdentityIQ and al…8.8