PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass

praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

PraisonAI is a multi-agent teams system. In versions 1.5.128

Open WebUI: Any authenticated user can reach internal services and

Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader

Flyto2 Core is an execution kernel for automation and AI

Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion

Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed

PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety

PraisonAI Has SSRF in FileTools.download_file() via Unvalidated

PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback

picklescan has Arbitrary file read using `io.FileIO`

Penetration Testing of Agentic AI: A Comparative Security Analysis Across Models and Frameworks

system and 13 distinct attack scenarios that span prompt injection, Server Side Request Forgery (SSRF), SQL injection, and tool misuse. Our 130 total test cases reveal significant security disparities: AutoGen