๐Ÿ” CVE Alert

CVE-2026-44335

UNKNOWN 0.0

SSRF bypass in PraisonAI

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32.

CWE CWE-918
Vendor mervinpraison
Product praisonai
Published May 8, 2026
Last Updated May 8, 2026
Stay Ahead of the Next One

Get instant alerts for mervinpraison praisonai

Be the first to know when new unknown vulnerabilities affecting mervinpraison praisonai are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

MervinPraison / PraisonAI
< 1.6.32

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
github.com: https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-q9pw-vmhh-384g