A vulnerability, which was classified as critical, has been found in MervinPraison PraisonAIAgents up to 1.5.127. The affected element is an unknown function of the file praisonaiagents/tools/web_crawl_tools.py. This manipulation causes server-side request forgery.
This vulnerability is handled as CVE-2026-40150. The attack can be initiated remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
