EUVD-2026-71131
GHSA-9c7r-jxm8-hgg2
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable SSRF with no authentication required; confidentiality-only impact as internal responses are disclosed but no write or availability effect is described.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or IP filtering. Attackers can inject malicious URLs through prompt injection to make the server fetch internal resources, with responses returned to the agent context.
AnalysisAI
Server-side request forgery in camel-ai OWL's DocumentProcessingToolkit exposes internal network resources to unauthenticated remote attackers across all tracked versions. The extract_document_content tool fetches caller-supplied URLs with no scheme, host, or IP allowlist, enabling attackers to pivot through the agent server to reach cloud metadata endpoints, internal APIs, or other SSRF-reachable services. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The DocumentProcessingToolkit must be enabled in the OWL agent configuration and the `extract_document_content` tool must be accessible to the agent. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 with AV:N/AC:L/AT:N/PR:N/UI:N/VC:H reflects worst-case conditions: a fully network-exposed, unauthenticated, zero-interaction exploit path. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch or fixed version has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, immediately isolate OWL agent deployments from internal network access by implementing network segmentation and blocking outbound connections to internal IP ranges and cloud metadata endpoints (169.254.169.254, AWS/GCP/Azure metadata service endpoints). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today