CVE-2026-44335
PraisonAI is a multi-agent teams system.
Published May 8, 2026 · updated Jun 17, 2026 · praison praisonaiagents
PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 8, 2026 · NIST NVD
Detected
PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32.
Jun 17, 2026 · NIST NVD
Updated
PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32.
Affected
- cpe praison/praisonaiagentsversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-44335
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-44335
PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32.
nvd.nist.gov