https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T20:14:10.113260+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335903 EUVD-2026-335903 2026-10-14T20:14:10.116207+00:00 EUVD-2026-335903 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61429 fkie_cve-2026-61429 2026-10-14T20:14:10.116239+00:00

PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting DNS rebinding and HTTP redirects. Attackers can craft URLs that resolve to internal services after the initial validation check, enabling the headless browser to follow redirects and read internal responses including sensitive canary values.

 https://cve.radiocsirt.org/vuln/ghsa-6g59-gm2v-qhvq GHSA-6g59-gm2v-qhvq — PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass 2026-10-14T20:14:10.116271+00:00

Affected: PyPI: praisonaiagents

## Summary

The DNS-rebinding / redirect SSRF bypass in PRAI-05 is **not limited to the httpx/urllib backend**. When `crawl4ai` (headless Chromium via Playwright) is installed, `web_crawl` auto-selects `provider=crawl4ai`, and the headless browser re-resolves DNS and follows redirects on its own — with no per-connection SSRF guard. Runtime-confirmed read-back of the internal canary via both DNS rebinding and redirect (`provider: "crawl4ai"`). Status: runtime-confirmed addendum to PRAI-05.

## Details

### Affected component - Package `praisonaiagents` 4.6.63. Backend selected when `crawl4ai`+Playwright are installed. - Files: `src/praisonai-agents/praisonaiagents/tools/web_crawl_tools.py` (`_crawl_with_crawl4ai`) and `src/praisonai-agents/praisonaiagents/tools/crawl4ai_tools.py` (standalone crawl wrappers).

### Vulnerable code / root cause

Path: `src/praisonai-agents/praisonaiagents/tools/web_crawl_tools.py`

Function: `_crawl_with_crawl4ai`

Snippet: ```python async with AsyncWebCrawler() as crawler: for url in urls: result = await crawler.arun(url=url) # headless browser: re-resolves DNS, follows redirects ```

Path: `src/praisonai-agents/praisonaiagents/tools/crawl4ai_tools.py`

Function: `Crawl4AITools.crawl` / `crawl4ai`

Snippet: ```python result = await crawler.arun(url=url, config=config) # no _is_safe_crawl_url / no per-connect validation ```

Issue: the only SSRF check is the single pre-fetch `_is_safe_crawl_url()` on the initial URL string in `we…