CVE-2026-55535 PraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation
Attackers can bypass webhook URL validation via DNS rebinding to access internal services or cloud metadata in PraisonAI.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-55535?
CVE-2026-55535 is a medium-severity server-side request forgery vulnerability in MervinPraison PraisonAI, published on 25 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhook_url can later resolve to 127.0.0.1, 169.254.169.254, or another internal address. This issue is fixed in version 4.6.58.
Which versions are affected by CVE-2026-55535?
3 open source packages ship an affected version, including praisonai and PraisonAI.
| Package | Affected | Fixed in |
|---|---|---|
praisonai PyPI | All versions | 4.6.58 |
praisonai PyPI | All versions | 4.6.58 |
PraisonAI PyPI | All versions | 4.6.58 |
How do I fix CVE-2026-55535?
Upgrade praisonai to 4.6.58 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-55535 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-55535 exists.
Sources
Also known as GHSA-hmfx-4v44-9qw9, PYSEC-2026-3890.