Am I affected by praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS…? What should I do?

Question

The web_crawl tool performs its SSRF check only on the initial URL.

Affected: praisonaiagents < 1.6.58. Fixed in: 1.6.58. What should you check, and what should you do about it?

Full incident page with sources: https://agentarmorhq.com/incidents/2026/08/cve-2026-55524-praisonaiagents

AgentArmor team · Accepted Answer

**Am I affected?**
Affected: praisonaiagents < 1.6.58. Fixed in: 1.6.58.
- Check your version: run `pip show praisonaiagents`. Versions < 1.6.58 of praisonaiagents are affected.

**What to do now**
1. Upgrade to the fixed version: run `pip install --upgrade "praisonaiagents>=1.6.58"` (first patched version 1.6.58).
2. Disable redirect following (follow_redirects=False; for urllib use a redirect handler that re-validates), or re-validate every redirect hop's resolved IP.
3. Apply the deny check to both the validator and the actual socket target.
4. Resolve the hostname once, validate that IP, and connect to that exact validated IP (pin it) rather than re-resolving.

General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

**Sources**
- GitHub Advisory Database: https://github.com/advisories/GHSA-vg6p-v9vm-6fgj

Full incident page: https://agentarmorhq.com/incidents/2026/08/cve-2026-55524-praisonaiagents

Am I affected by praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS…? What should I do?

1 answer

Add your answer or comment