CVE-2026-61429
Last modified
CVE-2026-61429 is a high-severity vulnerability rated 8.5/10 on the CVSS scale. PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting DNS rebinding and HTTP redirects. Attackers can craft URLs that resolve to internal services after the initial validation check, enabling the headless browser to follow redirects and read internal responses including sensitive canary values.. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting DNS rebinding and HTTP redirects. Attackers can craft URLs that resolve to internal services after the initial validation check, enabling the headless browser to follow redirects and read internal responses including sensitive canary values.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| MervinPraison | PraisonAI | < 1.6.78 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-61429?
How severe is CVE-2026-61429?
How do I fix CVE-2026-61429?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-6142A vulnerability was identified in tushar-2223 Hotel Manageme…7.3
- CVE-2026-61424Joomla Extension - dj-extensions.com - Unauthenticated arbit…10
- CVE-2026-61425Joomla Extension - balbooa.com - Authentication bypass in Gr…9.4
- CVE-2026-61426PraisonAI before 1.7.3 contains an insecure default configur…8.8
- CVE-2026-61427PraisonAI before 4.6.78 exposes the MCP HTTP-stream transpor…7.3
- CVE-2026-61428PraisonAI AgentMail versions before 4.6.78 lack signature ve…7.3
- CVE-2026-6143A security flaw has been discovered in farion1231 cc-switch …6.3
- CVE-2026-61430PraisonAI before 1.6.78 contains a server-side request forge…8.5
- CVE-2026-61431PraisonAI before 4.6.78 contains a path traversal vulnerabil…6.8
- CVE-2026-61432PraisonAI (praisonaiagents) before 1.6.78 contains a path tr…6.9
- CVE-2026-61433PraisonAI before 4.6.78 fails to safely encode deployment co…8.5
- CVE-2026-61434PraisonAI versions before 4.6.78 contain an allowlist bypass…8.8
Are you affected by CVE-2026-61429?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST