THREAT OPS › Threat News › [GHSA] GHSA-8hjw-25cg-g52h (high) — praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets
[GHSA] GHSA-8hjw-25cg-g52h (high) — praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets
GHSA-8hjw-25cg-g52h Severity: high CVE: CVE-2026-55523
praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets
## Summary
`praisonaiagents.tools.web_crawl_tools.web_crawl()` validates the initial URL and blocks direct loopback/private destinations by default, but the default httpx fallback still uses `httpx.Client(follow_redirects=True)` and does not revalidate r
Indicators of compromise
- 095653d78a01cc6c80ff5b2dd20a8e5619686ddcsha1
- CVE-2026-55523cve
- CVE-2026-40160cve
- http://attacker.test:url
- http://127.0.0.1:{internal_port}/secreturl
- http://attacker.test:{redirect_port}/gourl
- 93.184.216.34ipv4
Original source: https://github.com/advisories/GHSA-8hjw-25cg-g52h