Live › vulnerability › CVE-2026-57114
Go to dashboardPraisonAI's Async Jobs API checks webhook URLs when a job is submitted, but the check is not enforced when the webhook is actually sent. An attacker can use a hostname that resolves to a public IP at check time and to loopback, private or cloud metadata addresses at delivery time.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running PraisonAI from 4.5.126 before 4.6.59 with the Async Jobs API enabled and reachable by users who can submit webhook URLs. Deployments where only trusted operators can create jobs have less exposure. Teams on 4.6.59 or later are not affected by this report.
No product ranges from the sources yet.
pip show praisonai and see whether it is in the range 4.5.126 up to but not including 4.6.59.webhook_url in job requests.4.6.59 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network request. When a job completes, _send_webhook() passes the original hostname to httpx.AsyncClient.post() with no send-time validation, IP pinning, or guarded transport. An attacker-controlled hostname can therefore resolve to a public IP during Pydantic validation and later resolve to loopback/private/cloud-metadata infrastructure during webhook delivery. This bypasses the intended SSRF guard in current supported releases. This appears to be an incomplete fix / patch bypass for GHSA-8frj-8q3m-xhgm. This issue has been patched in version 4.6.59.
This page as .md · .json · in your agent: get_signal("CVE-2026-57114")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.