Machine-written summary
Summary written by Claude Haiku from the source advisory. Not reviewed by a person.
PraisonAI (PyPI praisonai) versions before 4.5.90 are vulnerable to server-side request forgery through the passthrough() and apassthrough() functions. The caller-supplied api_base value is used for an HTTP request without validation when the primary path raises an AttributeError, so an attacker can make the server send requests to arbitrary hosts it can reach. The source says this can expose cloud instance credentials and unauthenticated internal services, and that the Flask API server ships with authentication disabled by default. Upgrade to praisonai 4.5.90 or later.
Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 7.7 | High | 3.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N | CNA (GitHub_M) |
- CISA KEV Not listed.
- EPSS 0.0035, the 29th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
- 31 Oct 2026, 15:01 UTC First seen by agentprime
- 31 Oct 2026, 15:01 UTC Confirmed by OSV