CVE-2026-57143

The PraisonAI multi-agent system is vulnerable to Server-Side Request Forgery (SSRF) in the searxng_search and search_web tools within praisonaiagents versions prior to 1.6.62 . The root cause is the lack of validation for the searxng_url parameter, which is passed directly to requests.get(). Bec...

EUVD-2026-97773

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxngsearch and the searchweb SearxNG provider pass the LLM-controlled searxngurl parameter directly to requests.get without validating its scheme, host, port, or resolved address. Prompt-injected content can direct the...