PyPI/praisonaiagents CVE-2026-55525: high 7.5, EPSS 0.51%

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Action: Upgrade praisonaiagents to 1.6.58 or later.

pip install praisonaiagents==1.6.58

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3898
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5r34-2g38-6569
• https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1
• https://github.com/MervinPraison/PraisonAI
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58
• https://pypi.org/project/praisonaiagents
• https://github.com/advisories/GHSA-5r34-2g38-6569
• https://nvd.nist.gov/vuln/detail/CVE-2026-55525

CVE-2026-55525 · published 2026-09-10T09:44:53.462314Z · modified 2026-09-10T12:15:07.158624675Z · JSON