CVE-2026-34936

CVE-2026-34936 details are reserved, but connected advisory GHSA-X6M9-GXVR-7JPV describes a concrete SSRF flaw in PraisonAI: passthrough() accepts a caller-controlled api_base that is concatenated with endpoint and used in httpx.Client.request() without validation. The vulnerability enables acces...