Review reviewHigh

CVE-2026-34954

MervinPraison PraisonAI, praisonaiagents

PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.

CVSS: 8.6
EPSS: 0.40%
CISA KEV: Not listed
Published: 2026.04.04

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.40%

Technical severityCVSS 8.6

Vulnerability overview

Affected product and versions

Product: MervinPraison PraisonAI, praisonaiagents
Affected versions: >= < 1.5.95, < 1.5.95
Fixed versions: 1.5.95

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that MervinPraison PraisonAI, praisonaiagents and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CWE: CWE-918