HIGH 8.5 GitHub
CVE-2026-61429
PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass
## Summary
The DNS-rebinding / redirect SSRF bypass in PRAI-05 is **not limited to the httpx/urllib backend**. When `crawl4ai` (headless Chromium via Playwright) is installed, `web_crawl` auto-selects `provider=crawl4ai`, and the headless browser re-resolves DNS and follows redirects on its own — with no per-connection SSRF guard. Runtime-confirmed read-back of the internal canary via both DNS rebinding and redirect (`provider: "crawl4ai"`). Status: runtime-confirmed addendum to PRAI-05.
## De
Affected Products
- pip/praisonaiagents <= 1.6.77
References
- https://github.com/advisories/GHSA-6g59-gm2v-qhvq
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6g59-gm2v-qhvq
- https://nvd.nist.gov/vuln/detail/CVE-2026-61429
- https://www.vulncheck.com/advisories/praisonai-before-ssrf-via-crawl4ai-chromium-backend
This high severity vulnerability with a CVSS score of 8.5 was published on 2026-10-07 via GitHub. Affected: pip/praisonaiagents <= 1.6.77.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.