CVE-2026-47390

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, "spidertools" URL validation can be bypassed using alternate loopback host encodings. The tool contains a URL validation function intended to block local or unsafe...