CVE-2026-55523 | MervinPraison PraisonAI 1.5.128-1.6.57 Web Crawl Tools web_crawl_tools.py praisonaiagents.tools.web_crawl_tools.web_crawl url server-side request forgery

August 5, 2026 Yanac

A vulnerability, which was classified as critical, has been found in MervinPraison PraisonAI 1.5.128-1.6.57. Affected by this issue is the function praisonaiagents.tools.web_crawl_tools.web_crawl of the file praisonaiagents/tools/web_crawl_tools.py of the component Web Crawl Tools. The manipulation of the argument url leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-55523. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More