PraisonAI: SSRF in FileTools.download_file() via Unvalidated URL (MervinPraison PraisonAI)
En bref
- Source
- NVD
- EPSS
- EPSS 0.41 % · centile 36 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- GitHub_M
- Statut NVD
- Analyzed
Rechercher sur…
Description
PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.
Faiblesses (CWE)
- CWE-918 — Falsification de requête côté serveur (SSRF)
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.6 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N | GitHub_M |
| CVSS 3.1 | HIGH 8.6 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N | NVD · security-advisories@github.com (Secondary) |
Avis
- GHSA-44c2-3rw4-5gvh — PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL
- PYSEC-2026-2940 — PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL
Références européennes
- ENISA EUVD · EUVD-2026-18927
- GCVE · GCVE-0-2026-34954
Configurations affectées (CPE NVD)
cpe:2.3:a:praison:praisonaiagents:*:*:*:*:*:*:*:*< 1.5.95
Produits affectés
| Produit | Versions |
|---|---|
| MervinPraison · PraisonAI | affected < 1.5.95 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |