High severity8.5NVD Advisory· Published Jul 15, 2026· Updated Jul 15, 2026

CVE-2026-61430

Description

PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl tool that validates hostnames at check time but re-resolves them at connection time without IP pinning. Attackers can use DNS rebinding to bypass SSRF protection and retrieve internal HTTP response bodies from private or loopback services.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
praisonaiagentsPyPI	< 1.6.78	1.6.78

Affected products

PraisonAI/PraisonAIllm-fuzzy
Range: <1.6.78

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-qg25-6gc4-48mgghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-61430ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-62169ghsaADVISORY
github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qg25-6gc4-48mgnvdWEB
www.vulncheck.com/advisories/praisonai-before-dns-rebinding-ssrf-via-web-crawlnvdWEB

News mentions

No linked articles in our index yet.

Severity

HighCVSS v3.1

8.5/ 10

CVSS v48.4

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Changed
Confidentiality: High
Integrity: Low
Availability: None

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Affected

Source repo: github.com/MervinPraison/PraisonAI

EPSS

Probability of exploitation in the next 30 days.

0.25%

VYPR risk score

Composite of severity, exploitation, and reach.

0.55high

cvss	0.552
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

Weaknesses

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-918
Server-Side Request Forgery (SSRF)

CVE ID

CVE-2026-61430

Credits

D
dinhvaren
reporter