PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webhook_url when resolution raises socket.gaierror because the exception path uses except socket.gaierror: pass. JobExecutor._send_webhook() later performs a fresh lookup, allowing DNS changes to direct the request to an internal service. This issue is fixed in version 4.6.58.

A Server-Side Request Forgery (SSRF) vulnerability exists in PraisonAI versions prior to 4.6.58. The flaw resides in JobSubmitRequest.validate_webhook_url(), which incorrectly accepts webhook URLs when DNS resolution fails with a socket.gaierror exception due to a silent exception handler (except socket.gaierror: pass). A subsequent fresh DNS lookup in JobExecutor._send_webhook() can be exploited via DNS rebinding, allowing an attacker to redirect requests to internal services. This constitutes a classic Time-of-Check to Time-of-Use (TOCTOU) vulnerability in DNS validation. The issue enables attackers to potentially access internal infrastructure not intended to be publicly reachable. The vulnerability has been patched in PraisonAI version 4.6.58. A GitHub security advisory (GHSA-rg5q-pp8p-f7jm) has been published alongside the fix. Users are strongly advised to upgrade to the patched version immediately.