What’s Vulnerable › Vulnerabilities

CVE-2026-34936: PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback

• Severity: high (CVSS 7.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-04-03 · updated 2026-07-24
• Weakness: CWE-918

Description

PraisonAI is a multi-agent teams system. Prior to version 4.5.90, passthrough() and apassthrough() in praisonai accept a caller-controlled api_base parameter that is concatenated with endpoint and passed directly to httpx.Client.request() when the litellm primary path raises AttributeError. No URL scheme validation, private IP filtering, or domain allowlist is applied, allowing requests to any host reachable from the server. This issue has been patched in version 4.5.90.

Affected products

• MervinPraison PraisonAI: before 4.5.90 — fixed in 4.5.90

How to fix

Upgrade to a fixed version: MervinPraison PraisonAI 4.5.90. Check the vendor advisory for mitigations.

References

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x6m9-gxvr-7jpv
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x6m9-gxvr-7jpv

Get alerted when CVE-2026-34936 or the next vulnerability affects your stack