Tools AI Risk Radar ai-incident-0146
Incident record
PraisonAI fixes crawler access to private network addresses
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- praisonaiagents
- Actor
- researcher
- CVE
- CVE-2026-61429
What happened
The Crawl4AI browser backend could follow an attacker-controlled redirect or changed DNS answer to an internal address. A researcher demonstrated reading a test service through the crawler.
praisonaiagents: affected <= 1.6.77; fixed in 1.6.78. The date shown is the maintainer’s original disclosure date. Its advisory assigns 8.5 under CVSS 3.1.
Sources
- Primary disclosuregithub.com/MervinPraison/PraisonAI/security/advisories/GHSA-…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026