CVE-2026-44335 is a critical server side request forgery bypass (CVSS 9.8) in the praisonaiagents Python package, up to version 1.6.31. The URL safety check and the HTTP library disagree about which host a URL points to, so internal addresses slip through. Upgrade to 1.6.32 or later.
What's affected
From the project advisory for the praisonaiagents PyPI package:
- Affected: 1.6.31 and earlier.
- Fixed: 1.6.32.
The advisory says almost every use of URLs in the project goes through the same validation function and then a requests based call, so web scraping and similar agent tools are the places to look first. Any agent that can be asked to fetch a URL, including by text it reads from untrusted pages, is part of the exposure.
How to check if you're exposed
Check the installed version in each environment:
pip show praisonaiagents
pip freeze | grep -i praisonai
Search lock files and images the same way. Then list which agents use web fetch or scrape tools, and which network ranges the host can reach, including cloud metadata addresses.
What to do now
- Upgrade praisonaiagents to 1.6.32 or later everywhere it is installed.
- Run agent hosts with egress rules that block internal ranges and cloud metadata addresses, so a validation bug has less to reach.
- Limit which tools an agent can call, and what content can steer it.
- Do not rely on a URL string check alone. Resolve and check the address the client will actually connect to.
Why it matters
The class is CWE-918 (server side request forgery). The validation step parsed the URL with one parser and extracted the host. The HTTP client later parsed the same string differently and connected to another host. When two components read one string differently, a check on the first says nothing about what the second does.
The impact is that an agent host can be made to request addresses that only it can reach. The record does not mark this CVE as KEV.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
Is praisonaiagents the same package as praisonai?
No. They are separate PyPI packages with their own version numbers. See CVE-2026-44336 for the praisonai package.
Sources
Last reviewed: 19 October 2026.
