A Server-Side Request Forgery vulnerability in PraisonAIAgents allows authenticated attackers to perform unauthorized requests to internal resources and local files.

The web_crawl function in praisonaiagents/tools/web_crawl_tools.py lacks validation for scheme, hostname, or IP address, allowing an attacker with low privileges to force the agent to fetch internal network resources or local files via file:// URLs.

The exploitation of this vulnerability could lead to the exposure of sensitive cloud metadata, internal service information, or local system files. Given the CVSS score of 7.7, this represents a significant risk to organizational confidentiality, particularly in cloud-native environments where metadata services contain high-value credentials or configuration data.

Immediate Action: Upgrade PraisonAIAgents to version 1.5.128 or later to incorporate the necessary URL validation logic.

Proactive Monitoring: Review application logs for unusual outbound connection patterns or requests directed at internal IP ranges, such as 169.254.169.254 or local loopback addresses.

Compensating Controls: Implement strict egress filtering at the network level to prevent the agent from communicating with sensitive internal endpoints or private IP address spaces.

Public Exploit Available: Unknown.

This vulnerability presents a high risk to internal infrastructure security and must be treated with urgency. Administrators should prioritize updating the PraisonAIAgents package to version 1.5.128 immediately to neutralize the SSRF vector and prevent unauthorized access to sensitive local and cloud-based resources.