CVE-2026-44335

HIGH SEVERITY

CVSS Score & Metrics

Base Score

9.8 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32.

Vulnerability Details

Published Date

May 06, 2026

Last Modified

May 08, 2026

CWE ID

CWE-918

Source

GitHub

Vendor

pip

Product

praisonaiagents

External References

https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-q9pw-vmhh-384g
https://github.com/advisories/GHSA-q9pw-vmhh-384g

CVE-2026-44335

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment