Executive brief
PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter
Affected products
- PyPI praisonaiagents
Junglewise Threat Intelligence
CVE-2026-57143 · Severity: low · CVSS 3.1 · Published 2026-07-23
Technologies: praisonaiagents (PyPI). Vendors: PyPI.
PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter