{"data":{"id":"cad63913-5e93-4e14-be81-0a57f09bb267","title":"GHSA-5r34-2g38-6569: praisonaiagents web_crawl vulnerable to SSRF via redirect-following","summary":"The praisonaiagents web_crawl tool validates only the initial URL's resolved IP against a private and loopback blocklist, then fetches with httpx.Client(follow_redirects=True) without re-validating redirect targets. A public URL that returns a 302 to an internal address, such as the cloud metadata endpoint 169.254.169.254 or 127.0.0.1 services, causes the internal response body to be returned into the agent context. The default httpx crawl provider on a standard pip install praisonaiagents is affected, and the flaw is described as an incomplete fix for earlier web_crawl SSRF reports.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-5r34-2g38-6569","publishedAt":"2026-08-25T14:05:38.000Z","cveId":"CVE-2026-55525","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["praisonaiagents@< 1.6.58 (fixed: 1.6.58)"],"affectedPackageNames":["praisonaiagents"],"affectedPackageRefs":["pypi:praisonaiagents"],"affectedVendors":[],"affectedVendorsRaw":["praisonaiagents","web_crawl tool"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00507,"epssCheckedAt":"2026-11-04T18:09:13.251Z","kevDateAdded":null,"advisoryAliases":["GHSA-5r34-2g38-6569"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-08-25T14:05:38.000Z","fixReleasedAt":"2026-06-13T12:30:50.353Z","daysToFix":-73,"fixCheckedAt":"2026-10-29T21:31:26.456Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"praisonaiagents","fixedVersion":"1.6.58","matchedVersion":"1.6.58","fixReleasedAt":"2026-06-13T12:30:50.353Z","daysToFix":-73,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:26.311Z"}]}}