CyberRota Analysis
AI-GeneratedThe vulnerability affects the openagents-org openagents versions up to 0.8.19 and 0.9.3.post20, specifically in the `test_default_model` function within the `http.py` file, where improper handling of the `base_url` argument can lead to server-side request forgery (SSRF). This allows an attacker to potentially manipulate requests to internal services, posing a risk to the confidentiality and integrity of the server. Organizations using these versions should prioritize remediation to mitigate the risk of exploitation, especially if they expose their services to untrusted networks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the function test_default_model of the file sdk/src/openagents/sdk/transports/http.py. Performing a manipulation of the argument base_url results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used. Endpoint and both sinks unchanged since filing; only the file moved (e277dd1a). Maintainer closed as inapplicable yet the identical unguarded code still ships in 0.9.3.post20. Sibling admin endpoints do call the shipped-but-unused-by-this-handler _require_admin().