{"data":{"id":"6efe6d91-430d-4891-af8a-1b27c544de50","title":"GHSA-x44h-65qv-cw74: praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)","summary":"The praisonaiagents library has a security flaw in its SSRF (server-side request forgery, where an attacker tricks a server into making requests to internal systems) protection. The `_host_is_blocked()` function checks if hostnames are blocked, but it never performs DNS resolution (looking up what IP address a hostname points to). This means attackers can use services like `127.0.0.1.nip.io` (a public DNS service that resolves to the local machine) to bypass the protection and access internal services. The four tools `scrape_page`, `extract_links`, `crawl`, and `extract_text` are exposed as LLM-callable functions, so an AI agent can be tricked into making these malicious requests.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-x44h-65qv-cw74","publishedAt":"2026-08-25T14:37:26.000Z","cveId":"CVE-2026-55526","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":[],"issueType":"vulnerability","affectedPackages":["praisonaiagents@< 1.6.58 (fixed: 1.6.58)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["praisonaiagents"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-08-25T14:37:26.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}