PyPI/praisonaiagents CVE-2026-55523: high 7.7, EPSS 0.47%

praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets

Action: Upgrade praisonaiagents to 1.6.58 or later.

pip install praisonaiagents==1.6.58

Affected

Fixed versions

Sources

• osv: GHSA-8hjw-25cg-g52h
• nvd: CVE-2026-55523
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8hjw-25cg-g52h
• https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58

CVE-2026-55523 · published 2026-08-25T14:18:40Z · modified 2026-09-10T12:25:41.108195965Z · JSON