CVE-2026-55526

PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

State: Published
Severity: 8.5 High
Published: Aug 25, 2026
Updated: Aug 25, 2026
Reserved: Jun 16, 2026

Description

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resolve ordinary hostnames before scrape_page fetches them. A hostname such as 127.0.0.1.nip.io passes validation and resolves to loopback, permitting internal HTTP access. The fix uses socket.getaddrinfo and fails closed on DNS errors. This issue is fixed in version 1.6.58.

Scores

CVSS	Score	Vector	Source
3.1	8.5 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N	GitHub_M

Weaknesses

CWE-350 Reliance on Reverse DNS Resolution for a Security-Critical Action
CWE-918 Server-Side Request Forgery (SSRF)

Affected Products

Product	Versions
PraisonAIMervinPraison	< 4.6.58Affected
praisonaiagentsMervinPraison	< 1.6.58Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.