{"vulnerability": "cve-2026-5553", "sightings": [{"uuid": "591014fa-9753-4f07-9195-949427c671ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55536", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6g6r-q6gw-w8fg", "content": "", "creation_timestamp": "2026-08-25T16:35:14.878080Z"}, {"uuid": "91e61794-e874-4808-b2f1-43b9b4e29eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55532", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-pvph-5j39-v8qc", "content": "", "creation_timestamp": "2026-08-25T16:35:17.148533Z"}, {"uuid": "6db0a169-ce80-44fa-9d22-4761c1e1bfb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55535", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hmfx-4v44-9qw9", "content": "", "creation_timestamp": "2026-08-25T16:35:28.590247Z"}, {"uuid": "81e1900e-7993-486f-96d6-a40b35256480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55533", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gfq8-hmph-9gjv", "content": "", "creation_timestamp": "2026-08-25T16:35:19.416927Z"}, {"uuid": "c490a9a2-54e2-403c-a347-3132508425e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55539", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2jgc-f764-c5r2", "content": "", "creation_timestamp": "2026-08-25T16:35:21.687867Z"}, {"uuid": "89499f7d-74a5-485b-8d25-ce4d3f798515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55538", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-r7v3-x45f-g7hp", "content": "", "creation_timestamp": "2026-08-25T16:35:33.496832Z"}, {"uuid": "a25ace69-91aa-4645-9eb4-407d17a41040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55537", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rg5q-pp8p-f7jm", "content": "", "creation_timestamp": "2026-08-25T16:35:30.926329Z"}, {"uuid": "a0223e98-00fd-4e8f-b852-90af4ebb6d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55530", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cfxv-8fw8-rwpv", "content": "", "creation_timestamp": "2026-08-25T16:35:39.662801Z"}, {"uuid": "a2294a57-61e7-4fb5-99e6-98d1bc51d530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55534", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7ww9-85pg-cv4x", "content": "", "creation_timestamp": "2026-08-25T16:35:44.245065Z"}, {"uuid": "92beb252-4f9f-4d08-b7db-c911716c4f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55531", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-wv94-5qcp-6m36", "content": "", "creation_timestamp": "2026-08-25T16:35:48.826444Z"}, {"uuid": "f67a55cc-ecc3-4511-879e-859245f80bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55538", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtwcd4gi3x2y", "content": "CVE-2026-55538 - Auth bypass in PraisonAI allows unauthorized API execution on agent endpoints. CVSS 7.3. Update to v4.6.58 immediately. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-55538/", "creation_timestamp": "2026-08-25T17:02:43.042262Z"}, {"uuid": "5945eada-b493-4844-945f-fc183f6404a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55538", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117157223665240523", "content": "CVE-2026-55538 - Auth bypass in PraisonAI allows unauthorized API execution on agent endpoints. CVSS 7.3. Update to v4.6.58 immediately. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-55538/", "creation_timestamp": "2026-08-25T17:02:44.502301Z"}, {"uuid": "36b9dad8-d610-4a55-b3cc-65ce1694e255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55536", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtwfybfgai2b", "content": "\ud83d\udea8 CVE-2026-55536 \u2014 CVSS 9.1 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() che...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55536\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T18:08:14.022946Z"}, {"uuid": "2b903edc-048b-479e-b7de-976eaef86234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55536", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwv6fg24z2f", "content": "CVE-2026-55536 - praisonai\nThe PraisonAI browser component that talks to Chrome extensions checks the source of incoming WebSocket connections, but the check only looks at the start of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-08-25T22:40:05.584199Z"}, {"uuid": "e8accbee-7f94-47e7-a386-1ed0080931b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55537", "type": "seen", "source": "https://gist.github.com/alon710/a5504500046f829590c5dd3230ab4793", "content": "# CVE-2026-55537: CVE-2026-55537: Webhook Server-Side Request Forgery and TOCTOU Bypass in PraisonAI\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55537\n\n## Summary\nCVE-2026-55537 is a server-side request forgery (SSRF) and time-of-check time-of-use (TOCTOU) vulnerability in the PraisonAI multi-agent framework before version 4.6.58. The flaw exists in the job-submission component's webhook URL validation logic. When DNS resolution fails during verification, the application fails open, enabling attackers to register unresolvable URLs. When a completed job triggers the webhook, the application performs a fresh DNS resolution that attackers can manipulate to target internal resources.\n\n## TL;DR\nA fail-open DNS resolution handler in PraisonAI's webhook validator enables attackers to bypass SSRF protections via a TOCTOU mechanism, targeting protected internal network endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918, CWE-367, CWE-705\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 7.1 (High)\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n- **Scope Impact**: Changed (S:C)\n\n## Affected Systems\n\n- PraisonAI Multi-Agent Framework\n- **PraisonAI**: < 4.6.58 (Fixed in: `4.6.58`)\n\n## Mitigation\n\n- Upgrade the PraisonAI package to version 4.6.58 or higher.\n- Deploy network-level egress filtering rules to drop connections targeting private or loopback interfaces from the application host.\n- Configure DNS caching proxies to enforce minimum TTL constraints on resolved domains.\n\n**Remediation Steps:**\n1. Run the pip upgrade command: `pip install --upgrade praisonai`\n2. Verify the installed version is 4.6.58 or later by running `pip show praisonai`\n3. Update firewall configurations (iptables, AWS Security Groups) to block traffic from the PraisonAI container to the metadata endpoint 169.254.169.254 and RFC 1918 IP ranges.\n\n## References\n\n- [GitHub Security Advisory GHSA-rg5q-pp8p-f7jm](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rg5q-pp8p-f7jm)\n- [Fix Patch Commit on GitHub](https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1)\n- [PraisonAI v4.6.58 Release Changelog](https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.58)\n- [Official CVE Registry Record](https://www.cve.org/CVERecord?id=CVE-2026-55537)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55537) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T15:31:34.848315Z"}]}