{"schema":"threatline.record/2","record":{"id":"CVE-2026-57143","aliases":["GHSA-4pcv-mg8v-vrgf","PYSEC-2026-3530"],"summary":"PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter","details":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled searxng_url parameter directly to requests.get without validating its scheme, host, port, or resolved address. Prompt-injected content can direct the default search tool to internal JSON services, distinguish open and closed internal ports, and attempt cloud-metadata requests, with returned JSON results entering agent context. This issue is fixed in praisonaiagents 1.6.62.","categories":["Libraries & packages"],"product":"praisonaiagents","vendor":"MervinPraison","ecosystem":"PyPI","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-57143","source_modified_at":"2026-10-13T15:50:26.330Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"praisonaiagents","vendor":"MervinPraison","versions":[{"status":"affected","version":"< 1.6.62"}],"defaultStatus":null},{"source":"GitHub Advisory Database","source_url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4pcv-mg8v-vrgf","source_modified_at":"2026-06-24T01:48:40Z","fetched_at":"2026-10-23T19:58:35.668311Z","package":{"ecosystem":"pip","name":"praisonaiagents"},"range":"< current latest release"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-4pcv-mg8v-vrgf","source_modified_at":"2026-07-23T15:11:48.959990848Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"PyPI","name":"praisonaiagents","purl":"pkg:pypi/praisonaiagents"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.6.61"}],"type":"ECOSYSTEM"}],"versions":["0.0.1","0.0.10","0.0.100","0.0.101","0.0.102","0.0.103","0.0.104","0.0.105","0.0.106","0.0.107","0.0.108","0.0.109","0.0.11","0.0.110","0.0.111","0.0.112","0.0.113","0.0.114","0.0.115","0.0.116","0.0.117","0.0.118","0.0.119","0.0.12","0.0.120","0.0.121","0.0.122","0.0.123","0.0.124","0.0.125","0.0.126","0.0.127","0.0.128","0.0.129","0.0.13","0.0.130","0.0.131","0.0.132","0.0.133","0.0.134","0.0.135","0.0.136","0.0.137","0.0.138","0.0.139","0.0.14","0.0.140","0.0.141","0.0.142","0.0.143"]}],"fixed_versions":[{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-4pcv-mg8v-vrgf","source_modified_at":"2026-07-23T15:11:48.959990848Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"PyPI","name":"praisonaiagents","purl":"pkg:pypi/praisonaiagents"},"version":"1.6.61"}],"cvss":8.8,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00222,"percentile":0.12131,"score_date":"2026-10-23"},"published_at":"2026-10-12T18:48:00.429Z","modified_at":"2026-10-13T15:50:26.330Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-57143","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-13T15:50:26.330Z"},{"source":"GitHub Advisory Database","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4pcv-mg8v-vrgf","fetched_at":"2026-10-23T19:58:35.668311Z","source_modified_at":"2026-06-24T01:48:40Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-4pcv-mg8v-vrgf","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-07-23T15:11:48.959990848Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-57143","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","GitHub Advisory Database","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4pcv-mg8v-vrgf","tags":["exploit"]},{"source":"CVE List","url":"https://github.com/MervinPraison/PraisonAI/commit/2a855c470077c7d2e2479a575f7ef7f548d51c33","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.62","tags":["x_refsource_MISC"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-13T15:50:20.990896Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-13T15:50:26.330Z","content_hash":"899748835872b83d00480eaf75d62a03448113133ff4e7bf44ae8cd8cd8e88e5"}}