# CVE-2026-34954: MervinPraison PraisonAI SSRF in FileTools.download_file

Source: https://junglewise.ai/threats/cve-2026-34954-mervinpraison-praisonai-ssrf-in-filetools-download-file  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-03. Updated: 2026-07-24  
License: CC BY 4.0 with a link back

CVE-2026-34954 · Severity: high · CVSS 8.6 · Published 2026-04-03

PraisonAI is a framework used to build and manage teams of AI agents. A security flaw in its file download tool allows an attacker to force the AI system to make requests to internal servers or cloud management services that should be private. This could lead to the theft of sensitive cloud credentials or unauthorized access to internal company data.

Technologies: [Praisonaiagents](https://junglewise.ai/threats/technologies/praisonaiagents), [praisonaiagents (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonaiagents). Vendors: [Praison](https://junglewise.ai/threats/vendors/praison), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-34954 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-34954 being exploited in the wild.

**How severe is CVE-2026-34954?** High severity, with a CVSS score of 8.6, published 3 April 2026.

**Which products and versions are affected?** praisonaiagents (PyPI) ECOSYSTEM:introduced=0,fixed=1.5.95.

**Is there a fix for CVE-2026-34954?** Yes. praisonaiagents (PyPI): upgrade to 1.5.95 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-34954 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-34954?** Check whether you run Praisonaiagents or praisonaiagents (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- praisonaiagents (PyPI): upgrade to 1.5.95 or later

  ```sh
  pip install "praisonaiagents>=1.5.95"
  ```


## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the `FileTools.download_file()` function of the `praisonaiagents` package. The root cause is a failure to validate the `url` parameter before passing it to `httpx.stream()` with `follow_redirects=True`. An attacker can provide a malicious URL to reach internal network services or cloud metadata services (like AWS IMDSv1). This can be exploited via indirect prompt injection or direct API calls without authentication. Successful exploitation allows an attacker to exfiltrate sensitive information, such as IAM credentials, by writing them to a local file. The issue is fixed in version 1.5.95.

## Affected products

- MervinPraison PraisonAI < 1.5.95
- MervinPraison praisonaiagents <= 1.5.94

## Identifiers

- CVE-2026-34954
- GHSA-44c2-3rw4-5gvh
- PYSEC-2026-2940

## Timeline

- 2026-03-31: advisory: GitHub Security Advisory published by vendor
- 2026-04-03: disclosed: CVE-2026-34954 published
- 2026-04-03: patched: Fixed in version 1.5.95

## References

- [https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-44c2-3rw4-5gvh](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-44c2-3rw4-5gvh)

## Related threats

- [PraisonAI SearxNG URL validation bypass in search tools](https://junglewise.ai/threats/cve-2026-57143-praisonai-server-side-request-forgery-ssrf-in-searxng-search-web)
- [PraisonAI missing access control in API endpoints](https://junglewise.ai/threats/cve-2026-57118-praisonai-agentteam-launch-exposes-unauthenticated-remote-agent)
- [PraisonAI legacy SSE endpoint CORS and authentication bypass](https://junglewise.ai/threats/cve-2026-57112-praisonai-legacy-sse-endpoint-cors-and-authentication-bypass)
- [PraisonAI IMAP injection in email tools](https://junglewise.ai/threats/cve-2026-57130-praisonai-imap-injection-in-email-tools)
- [PraisonAI path traversal in file mention parsing](https://junglewise.ai/threats/cve-2026-57129-praisonai-path-traversal-in-file-mention-parsing)