PraisonAIAgents versions before 1.5.128 contain an SSRF vulnerability in the web_crawl() function located in praisonaiagents/tools/web_crawl_tools.py. The function does not perform any validation on URLs provided by AI agents, lacking scheme allowlisting, hostname/IP blocklisting, or private network checks. This allows attackers or malicious prompt injections to cause the agent to fetch internal resources including cloud metadata endpoints or local files via file:// URLs. The vulnerability is addressed in version 1.5.128.

Successful exploitation can lead to unauthorized access to sensitive internal resources such as cloud metadata services or local files, potentially exposing confidential information. The vulnerability does not directly impact integrity or availability but can result in significant confidentiality breaches. The CVSS score of 7.7 reflects a high severity due to network attack vector, low attack complexity, and high confidentiality impact.

Upgrade PraisonAIAgents to version 1.5.128 or later, where this SSRF vulnerability is fixed. Since no official remediation level or patch links are provided beyond the version fix, applying this update is the recommended action. Patch status is confirmed by the vendor's versioning information. No additional mitigations are specified.