PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool performs its SSRF check only on the initially supplied URL, allowing th…

CVE-2026-55524 affects PraisonAI, a multi-agent system, in versions prior to 1.6.58. The web_crawl tool contains a Server-Side Request Forgery (SSRF) vulnerability due to a validate-here/fetch-there design flaw. The SSRF protection resolves the hostname once using socket.gethostbyname and rejects private/loopback/link-local addresses, but then passes the URL to httpx.Client or urllib.request.urlopen with redirect-following enabled, which re-resolves the hostname at connect time without further validation. This gap allows attackers to bypass the SSRF check via HTTP redirects or DNS rebinding attacks. If an attacker can influence URLs passed to web_crawl(), they can cause the PraisonAI host to reach internal network endpoints, loopback addresses, or cloud metadata services. The response body is returned in the web_crawl() result, potentially exposing sensitive internal data. The vulnerability has been patched in version 1.6.58.