Local Deep Research EUVD-2026-32977

Local Deep Research (CPE: cpe:2.3:a:learningcircuit:local-deep-research:*:*:*:*:*:*:*:*) is a Python-based AI research assistant that fetches external URLs as part of its research pipeline. The vulnerable code path is the safe_get function, which calls validate_url for SSRF protection before passing the URL to requests.get. validate_url uses Python's urllib.parse.urlparse to extract the host and compare it against a blocklist of private IP ranges. The root cause (CWE-918, Server-Side Request Forgery) is a parser-differential: urlparse treats a backslash as an ordinary character and interprets the @ symbol as the userinfo-host separator, extracting the public host to the right of @. The requests library (backed by urllib3) treats backslash as a path delimiter, so the actual TCP connection is made to the host to the left of the backslash - an internal address that would normally be blocked. The same differential affected the NotificationURLValidator for HTTP/HTTPS notification URLs. The fix in v1.6.10 applies two layers: (1) an RFC_FORBIDDEN_URL_CHARS_RE regex in ssrf_validator.py that outright rejects URLs containing backslash, whitespace, or ASCII control bytes; and (2) replacing urlparse hostname extraction with urllib3.util.parse_url so the validator and HTTP client use the identical parser.