CVSS 3.1
8.6 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NCVE-2026-34954
High (8.6) in praison praisonaiagents. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in praisonaiagents 1.5.95.
PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
- CWE
- CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- praison:praisonaiagents
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-44c2-3rw4-5gvh | PyPI | praisonaiagents | <1.5.95 | 1.5.95 |
| PYSEC-2026-2940 | PyPI | praisonaiagents | <1.5.95 | 1.5.95 |