CVE-2026-57114

The PraisonAI multi-agent system (versions 4.5.126 through 4.6.57 ) is vulnerable to a Server-Side Request Forgery (SSRF) via DNS rebinding . The flaw exists in the Async Jobs API because the webhook_url is validated during request parsing and object construction, but this validation is not tied ...