CVE-2026-40150 HIGH

CVE-2026-40150: PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool

Vendor Mervinpraison
Product PraisonAIAgents
Weakness CWE-918 · SSRF
Published April 9, 2026
Last update April 14, 2026
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the web_crawl() function in praisonaiagents/tools/web_crawl_tools.py accepts arbitrary URLs from AI agents with zero validation. No scheme allowlisting, hostname/IP blocklisting, or private network checks are applied before fetching. This allows an attacker (or prompt injection in crawled content) to force the agent to fetch cloud metadata endpoints, internal services, or local files via file:// URLs. This vulnerability is fixed in 1.5.128.

Key dates

02Disclosure timeline

April 9, 2026 CVE published
April 14, 2026 Record updated