CVE-2026-55526: CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action in MervinPraison PraisonAI

The vulnerability in PraisonAI involves improper hostname resolution in the spider_tools._host_is_blocked() function before the scrape_page operation. Hostnames such as 127.0.0.1.nip.io pass validation because the function does not resolve them to their actual IP addresses, permitting access to internal loopback addresses. This is a case of CWE-350 (Reliance on Reverse DNS Resolution for a Security-Critical Action) and CWE-918 (Server-Side Request Forgery). The fix implemented in version 1.6.58 uses socket.getaddrinfo to resolve hostnames correctly and fails closed if DNS resolution errors occur, preventing unauthorized internal HTTP access.

An attacker with at least limited privileges (PR:L) can exploit this vulnerability remotely (AV:N) without user interaction (UI:N) to gain unauthorized read access to internal HTTP services, potentially exposing sensitive information (C:H). The integrity impact is low (I:L) and availability is not affected (A:N). The vulnerability has a high severity with a CVSS score of 8.5 and can lead to significant confidentiality breaches.

A fix is available in PraisonAI version 1.6.58, which properly resolves hostnames using socket.getaddrinfo and fails closed on DNS errors. Users should upgrade to version 1.6.58 or later to remediate this vulnerability. No other mitigation guidance is provided or necessary as the issue is addressed by the official fix.