CVE-2026-57143 MervinPraison CVE debrief

Who should care

PraisonAI users and administrators should assess exposure and update to version 1.6.62 or later. Affected operator, platform, vulnerability-management, and security-team impact should be reviewed to ensure proper mitigation and remediation. This issue requires immediate attention from users and administrators to prevent potential unauthorized access to internal services or cloud metadata.

Why it matters

The SSRF vulnerability in PraisonAI's SearxNG and search_web tools requires immediate attention from users and administrators to prevent potential unauthorized access to internal services or cloud metadata.

• Potential access to internal services
• Possible exposure of cloud metadata
• Need for urgent updates to PraisonAI

Technical summary

The vulnerability allows an attacker to control the searxng_url parameter, potentially leading to unauthorized requests to internal services or cloud metadata. This issue is fixed in praisonaiagents 1.6.62. The vulnerability requires immediate attention from users and administrators to prevent potential unauthorized access to internal services or cloud metadata. An attacker can control the searxng_url parameter to make unauthorized requests, potentially accessing internal services or cloud metadata. The vulnerability was addressed in version 1.6.62 of praisonaiagents.

Defensive priority

High priority for PraisonAI users to update to version 1.6.62 or later

Recommended defensive actions

• Update PraisonAI to version 1.6.62 or later
• Review and restrict access to the searxng_url parameter
• Monitor for suspicious requests to internal services
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details on the vulnerability, but additional information on affected systems and exploitation attempts is limited. There is no evidence of public exploitation, but defenders should verify the vulnerability in their environment and review compensating controls. The vulnerability was addressed in version 1.6.62 of praisonaiagents.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.