PyPI/praisonaiagents CVE-2026-40160: medium 6.5, EPSS 0.46%

PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback

Action: Upgrade praisonaiagents to 1.5.128 or later.

pip install praisonaiagents==1.5.128

Affected

Fixed versions

Sources

• osv: PYSEC-2026-2951
• nvd: CVE-2026-40160
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qq9r-63f6-v542
• https://github.com/MervinPraison/PraisonAI
• https://pypi.org/project/praisonaiagents
• https://github.com/advisories/GHSA-qq9r-63f6-v542

CVE-2026-40160 · published 2026-07-13T14:36:52.174973Z · modified 2026-07-13T16:31:53.940698897Z · JSON