PraisonAI versions before 4.6.40 (and praisonaiagents before 1.6.40) contain an SSRF vulnerability due to insufficient URL validation in the spider_tools module. The validation function only blocks a limited set of exact host strings such as 'localhost' and '127.0.0.1' but fails to normalize hostnames, resolve DNS, parse numeric IPv4 variants, or validate the final resolved IP address. Consequently, attackers can bypass these checks using alternate loopback host encodings to induce SSRF requests targeting loopback-only services via functions like scrape_page(), crawl, or extract_text. The vulnerability is addressed in PraisonAI 4.6.40 and praisonaiagents 1.6.40.

An attacker able to influence URLs passed to vulnerable functions can cause the server to make unauthorized requests to internal loopback services. This can lead to information disclosure from internal services accessible only locally. The CVSS 3.1 base score is 5.5 (medium severity), reflecting local attack vector, low complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, and no integrity or availability impact.

A patch is available in PraisonAI version 4.6.40 and praisonaiagents version 1.6.40 that fixes the URL validation bypass. Users should upgrade to these versions or later to remediate this SSRF vulnerability. No official vendor advisory or additional remediation guidance is provided, so patching is the recommended action. Patch status is not explicitly confirmed beyond the version fix statement; verify with vendor sources before deployment.