CVE-2026-55537 | MervinPraison PraisonAI up to 4.6.57 Webhook Validation JobSubmitRequest.validate_webhook_url server-side request forgery

August 25, 2026 Yanac

A vulnerability has been found in MervinPraison PraisonAI up to 4.6.57 and classified as critical. This issue affects the function JobSubmitRequest.validate_webhook_url of the component Webhook Validation. The manipulation of the argument webhook_url leads to server-side request forgery.

This vulnerability is traded as CVE-2026-55537. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More