Llmgateway
Monthly
Blind server-side request forgery (SSRF) in LLMGateway through 1.20.0 allows authenticated API key holders to force webhook POST requests to arbitrary internal targets via the video-generation callback_url parameter, which bypasses the assertSafeWebhookTarget check. Attackers can reach loopback, private RFC1918, or cloud metadata endpoints (169.254.169.254) from the worker's network, potentially exposing internal services or cloud credentials, though the blind nature limits data exfiltration to side effects of the POST request. No public exploit code has been identified at time of analysis, and exploitation requires a valid API key and use of the video feature.
Blind server-side request forgery (SSRF) in LLMGateway through 1.20.0 allows authenticated API key holders to force webhook POST requests to arbitrary internal targets via the video-generation callback_url parameter, which bypasses the assertSafeWebhookTarget check. Attackers can reach loopback, private RFC1918, or cloud metadata endpoints (169.254.169.254) from the worker's network, potentially exposing internal services or cloud credentials, though the blind nature limits data exfiltration to side effects of the POST request. No public exploit code has been identified at time of analysis, and exploitation requires a valid API key and use of the video feature.