SSRF in PraisonAI web_crawl via redirect-following and DNS rebinding (CVE-2025-55324)

Vulnerability Overview Vulnerability Name: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap) Vulnerability Description: The tool performs SSRF checks only on the initial URL, resolving the hostname once, using , and rejecting results. It then passes the URL to a crawler using or . When is unavailable, it follows redirects and re-resolves the hostname upon connection without further validation. This "validate-then-fetch" gap can be bypassed in two ways: HTTP redirection and DNS rebinding. Scope of Impact Affected Versions: package versions Fixed Versions: CVSS Score: 7.5/10 Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Changed Confidentiality: High Integrity: Low Availability: Low Remediation Fix Measures: - Resolve the hostname once, validate the IP, and connect to the exactly verified IP (instead of re-resolving). - Disable redirect following ( ). For , use redirect encoding (e.g., and CLI functionality). - Apply hostname checks to both the validator and the actual socket connection. - Line 364 in should adhere to and serve as a model for proper implementation. POC Code Additional Information Vulnerability Source: MervinPraison / PraisonAI Publication Date: Jun 13 Vulnerability ID: GHSA-v9gp-v9vm-6t6j CVSS v3 Base Metrics: - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L CVE ID: CVE-2025-55324 Weaknesses: - CWE-367 - CWE-918 Contributors: sour-exploit (Reporter)

Goal Reached Thanks to every supporter — we hit 100%!

SSRF in PraisonAI web_crawl via redirect-following and DNS rebinding (CVE-2025-55324)

More from this source