CVE-2026-57114: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition in MervinPraison PraisonAI

PraisonAI's Async Jobs API performs hostname validation on webhook URLs twice: once during job request parsing and again when constructing the internal Job object. This validation blocks loopback and private IP targets to prevent SSRF attacks. However, the final network request that sends the webhook does not perform validation at send time, nor does it pin the IP or use guarded transport. An attacker can supply a hostname that resolves to a public IP during validation but later resolves to a loopback, private, or cloud metadata IP during webhook delivery, effectively bypassing SSRF protections. This TOCTOU race condition is an incomplete fix or patch bypass of a previous vulnerability (GHSA-8frj-8q3m-xhgm). The issue is resolved in PraisonAI version 4.6.59.

An attacker can bypass intended SSRF protections by exploiting the race condition between hostname validation and webhook delivery. This allows sending requests to internal or cloud metadata IP addresses that should be blocked, potentially exposing sensitive internal services or metadata endpoints. The vulnerability impacts confidentiality and integrity but does not affect availability.

Upgrade PraisonAI to version 4.6.59 or later, where this vulnerability has been patched. The vendor advisory confirms the fix in 4.6.59. Until upgrading, no other specific mitigations are provided.