CVE-2026-55524 describes a TOCTOU race condition vulnerability in MervinPraison's PraisonAI web_crawl tool. The SSRF protection performs hostname validation only once at the initial URL resolution using socket.gethostbyname, rejecting private, loopback, and link-local addresses. However, the fetch operation uses httpx.Client or urllib.request.urlopen with follow_redirects enabled, which re-resolves hostnames at connection time without further validation. This discrepancy allows attackers to exploit HTTP redirects or DNS rebinding to cause the host to fetch internal network or cloud metadata endpoints, exposing sensitive information. The vulnerability affects all PraisonAI versions prior to 1.6.58, where it has been fixed.

An attacker able to influence URLs passed to the web_crawl tool can bypass SSRF protections and cause the PraisonAI host to connect to internal, loopback, private network, or cloud metadata endpoints. This can lead to unauthorized disclosure of sensitive internal data. The CVSS score of 7.5 (high severity) reflects the network attack vector, high confidentiality impact, limited integrity impact, and no availability impact. There are no known exploits in the wild at this time.

This vulnerability is fixed in PraisonAI version 1.6.58. Users should upgrade to version 1.6.58 or later to remediate the issue. No other vendor advisories or temporary mitigations are provided. Patch status is not explicitly stated but the fix version is known, so upgrading is the recommended remediation.