CVE-2026-55535 in PraisonAI
Sumário
de MITRE • 25/08/2026
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhook_url can later resolve to 127.0.0.1, 169.254.169.254, or another internal address. This issue is fixed in version 4.6.58.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.