CVE-2026-60091 describes an SSRF vulnerability in MervinPraison's PraisonAI product prior to version 4.6.78. The flaw exists in the /api/v1/runs endpoint of the Jobs API, where the webhook_url parameter undergoes validation when the request is received but is re-resolved later at connection time. This discrepancy allows attackers to exploit DNS rebinding techniques to perform blind SSRF attacks targeting internal services. The vulnerability is unauthenticated and has a CVSS 4.0 base score of 6.9, indicating medium severity. There is no vendor advisory or patch information available at this time.

An attacker can exploit this vulnerability to send unauthorized requests from the PraisonAI server to internal network services by leveraging DNS rebinding. This could potentially expose internal resources or data not otherwise accessible externally. The attack does not require authentication and can be performed remotely. However, the impact is limited by the medium severity rating and the lack of known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access from the PraisonAI server to sensitive internal services and monitor for suspicious activity related to the Jobs API. Avoid exposing the /api/v1/runs endpoint to untrusted sources if possible.