CVE-2026-40150CWE-918

PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool

High · published April 9, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the web_crawl() function in praisonaiagents/tools/web_crawl_tools.py accepts arbitrary URLs from AI agents with zero validation. No scheme allowlisting, hostname/IP blocklisting, or private network checks are applied before fetching. This allows an attacker (or prompt injection in crawled content) to force the agent to fetch cloud metadata endpoints, internal services, or local files via file:// URLs. This vulnerability is fixed in 1.5.128.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00382 · 31.1th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-04-09T21:26Z
EPSS history
Timeline
  • 09 APR 21:26Z
    PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool
    cvelistv5