PraisonAI, a multi-agent teams system, has an SSRF vulnerability in versions before 4.5.128. The vulnerability arises because the /api/v1/runs endpoint accepts a webhook_url parameter without validating the URL. When a job completes, the server uses httpx.AsyncClient to POST to the provided URL. An unauthenticated attacker can exploit this to make the server send requests to arbitrary destinations, potentially accessing sensitive internal or cloud metadata endpoints. The issue is resolved in version 4.5.128.

An unauthenticated attacker can exploit this vulnerability to make the PraisonAI server send HTTP POST requests to arbitrary URLs, including internal network services and cloud metadata endpoints. This can lead to information disclosure or interaction with internal services that are otherwise inaccessible externally. The impact includes partial confidentiality and integrity loss but no direct availability impact is indicated.

Upgrade PraisonAI to version 4.5.128 or later, where this SSRF vulnerability is fixed. Since the vendor advisory indicates the issue is resolved in this version, applying this official fix is the recommended remediation. Patch status is not explicitly stated beyond the fixed version, so confirm with vendor resources before deployment.