CVE-2026-55535: Time-of-check Time-of-use (TOCTOU) Race Condition

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validatewebhookurl path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhookurl can later resolve to 127.0.0.1, 169.254.169.254, or another internal address...