CVE-2026-61430: PraisonAI Package Suffers from DNS Rebinding Bypass in SSRF Protection
Summary
CVE-2026-61430: PraisonAI: DNS rebinding bypass in web_crawl SSRF protection allows internal response disclosure. Affects praisonaiagents versions < 1.6.78. Fixed in 1.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an advanced AI-driven tool designed for web crawling and data extraction. Its web_crawl agent fetches server-side HTTP requests based on user-defined URLs. The package is widely used for automating data collection tasks across various platforms. However, it has recently been identified to have a critical vulnerability that allows attackers to exploit its server-side request forgery (SSRF) protection mechanisms, leading to potential internal data exposure.
Vulnerability Detail
The vulnerability arises from the _is_safe_crawl_url() function, which performs DNS resolution at validation time but does not pin the resolved IP address. This allows an attacker to use a DNS rebinding technique, where the hostname resolves to a public IP during validation and an internal IP during the actual fetch. As a result, the internal HTTP response can be disclosed to the attacker, leading to unauthorized access to sensitive internal services. This is classified as SSRF with internal response disclosure, posing a high severity risk.
How To Fix
Latest published version: 1.7.14 as of 22 Oct 2026
pip install --upgrade "praisonaiagents==1.7.14"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonaiagents==1.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can disable the web_crawl functionality until the package is updated. Additionally, you can manually validate URLs before passing them to the web_crawl function to ensure they do not resolve to internal IP addresses.
Conclusion
The PraisonAI package has a critical vulnerability (CVE-2026-61430) that allows DNS rebinding attacks, leading to internal data exposure. Users are strongly advised to update to the latest version to mitigate this risk. For those unable to update immediately, temporary workarounds are available to help protect sensitive data.
See every vulnerability recorded for praisonaiagents →
FAQ
DNS rebinding is a technique that allows an attacker to manipulate DNS responses, enabling them to bypass security restrictions and access internal network resources.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors open-source vulnerabilities in real-time.
The vulnerability can lead to unauthorized access to internal services, exposing sensitive data and potentially compromising the security of the entire application.
Yes, a patch is available in version 1.6.78 of the praisonaiagents package. It is recommended to update to this version to mitigate the risk.
If an immediate update is not possible, consider disabling the web_crawl functionality and validating URLs manually to prevent exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for praisonaiagents.
