PraisonAI spider_tools SSRF Protection Bypass via Alternate Loopback Host Encodings (CVE-2024-47390)

Vulnerability Overview Vulnerability Name: PraisonAI SSRF protection bypass via alternate loopback host encodings Vulnerability Description: The URL validation functionality in the module of PraisonAI can be bypassed by using alternative loopback host encodings. This module contains a URL validation function intended to block local or dangerous targets before fetching attacker-controlled URLs. However, the validation only blocks a small subset of exact strings, such as and , and does not normalize hostnames, resolve DNS, parse IPv4 variants, or validate the final resolved IP address. Consequently, URLs such as can bypass the protection and still access loopback services. Affected Versions Affected Versions: - package: - package: Fixed Versions: - package: - package: CVSS Score: 5.5 / 10 CVE ID: CVE-2024-47390 Remediation Upgrade Version: Upgrade the and packages to the fixed versions ( and ). POC Code Confirmed Local Results The following bypasses have been confirmed locally: Expected Secure Behavior All loopback-equivalent addresses should be blocked prior to the HTTP request. Actual Vulnerable Behavior Several alternative loopback representations pass validation and are fetched by the tool. Impact An attacker can influence the URLs passed to PraisonAI's , causing the process to send HTTP requests to services accessible only via loopback. Potential impacts include: SSRF against loopback-only management panels or development servers Access to local services that should not be remotely reachable Retrieval of local service responses into the agent tool output Potential access to cloud metadata or private network services if other address range equivalents are also bypassed This report does not claim arbitrary TCP access or remote code execution. The demonstrated behavior is HTTP(S) SSRF via the spider URL fetching functionality.

Goal Reached Thanks to every supporter — we hit 100%!

PraisonAI spider_tools SSRF Protection Bypass via Alternate Loopback Host Encodings (CVE-2024-47390)

More from this source