The vulnerability lies in PraisonAI’s Jobs API validate_webhook_url() function, which fails to properly handle socket.gaierror errors. If an attacker supplies a webhook_url that resolves to an internal IP address such as 127.0.0.1 or 169.254.169.254, the server will later make a request to that address because the URL was deemed valid. This results in a Server‑Side Request Forgery enabling the attacker to access internal services or information, compromising confidentiality and potentially integrity.

MervinPraison’s PraisonAI product is affected for all releases prior to version 4.6.58. Users running 4.6.57 or earlier are vulnerable and should consider an update as soon as possible.

The CVSS score is 6.8, indicating a high impact as the vulnerability allows outbound network requests from the host to internal addresses. The EPSS score is not available, and the issue is not listed in the CISA KEV catalog. The likely attack surface is the Jobs API endpoint that accepts a webhook_url; an attacker can supply a crafted URL that resolves to a protected internal resource, achieving SSRF without requiring authentication to the internals of the host.