AI AgentHigh
CVE-2026-40150: PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the web_crawl() function in praison…
- Occurred
- Apr 9, 2026
- Published
- Apr 9, 2026
- Source
- NVD CVE
Summary
PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the web_crawl() function in praisonaiagents/tools/web_crawl_tools.py accepts arbitrary URLs from AI agents with zero validation. No scheme allowlisting, hostname/IP blocklisting, or private network checks are applied before fetching. This allows an attacker (or prompt injection in crawled content) to force the agent to fetch cloud metadata endpoints, internal services, or local files via file:// URLs. This vulnerability is fixed in 1.5.128.
Tags
- CVE
- CVE-2026-40150
- cvss:HIGH
- agent-fail:tool-selection
- agent-cause:missing-guardrail
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Multi-agent system vulnerability allows unauthorized access to internal services via unvalidated URLs, enabling potential data breaches.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8