{"uuid": "e8accbee-7f94-47e7-a386-1ed0080931b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55537", "type": "seen", "source": "https://gist.github.com/alon710/a5504500046f829590c5dd3230ab4793", "content": "# CVE-2026-55537: CVE-2026-55537: Webhook Server-Side Request Forgery and TOCTOU Bypass in PraisonAI\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55537\n\n## Summary\nCVE-2026-55537 is a server-side request forgery (SSRF) and time-of-check time-of-use (TOCTOU) vulnerability in the PraisonAI multi-agent framework before version 4.6.58. The flaw exists in the job-submission component's webhook URL validation logic. When DNS resolution fails during verification, the application fails open, enabling attackers to register unresolvable URLs. When a completed job triggers the webhook, the application performs a fresh DNS resolution that attackers can manipulate to target internal resources.\n\n## TL;DR\nA fail-open DNS resolution handler in PraisonAI's webhook validator enables attackers to bypass SSRF protections via a TOCTOU mechanism, targeting protected internal network endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918, CWE-367, CWE-705\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 7.1 (High)\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n- **Scope Impact**: Changed (S:C)\n\n## Affected Systems\n\n- PraisonAI Multi-Agent Framework\n- **PraisonAI**: < 4.6.58 (Fixed in: `4.6.58`)\n\n## Mitigation\n\n- Upgrade the PraisonAI package to version 4.6.58 or higher.\n- Deploy network-level egress filtering rules to drop connections targeting private or loopback interfaces from the application host.\n- Configure DNS caching proxies to enforce minimum TTL constraints on resolved domains.\n\n**Remediation Steps:**\n1. Run the pip upgrade command: `pip install --upgrade praisonai`\n2. Verify the installed version is 4.6.58 or later by running `pip show praisonai`\n3. Update firewall configurations (iptables, AWS Security Groups) to block traffic from the PraisonAI container to the metadata endpoint 169.254.169.254 and RFC 1918 IP ranges.\n\n## References\n\n- [GitHub Security Advisory GHSA-rg5q-pp8p-f7jm](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rg5q-pp8p-f7jm)\n- [Fix Patch Commit on GitHub](https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1)\n- [PraisonAI v4.6.58 Release Changelog](https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58)\n- [Official CVE Registry Record](https://www.cve.org/CVERecord?id=CVE-2026-55537)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55537) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T15:31:34.848315Z"}