CVE-2026-55525

PraisonAI (praisonaiagents), a multi-agent teams system, is vulnerable to SSRF via redirect-following in the web_crawl function prior to version 1.6.58 . The root cause is that only the initial URL's resolved IP is validated against a private/loopback blocklist, while the underlying httpx.Client(...