Swarms
Monthly
Server-side request forgery in the kyegomez Swarms multi-agent framework (all versions through 6.8.1) lets remote unauthenticated attackers coerce the server into fetching attacker-chosen internal endpoints. The flaw lives in the _is_safe_url blocklist check, which validates the literal hostname but never re-checks the address returned by DNS resolution - so a hostname that resolves to a private, loopback, or cloud-metadata address slips past the filter. Supplied as an image or audio URL to an agent, this can be abused to reach internal services and exfiltrate cloud credentials. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Server-side request forgery in the kyegomez Swarms multi-agent framework (all versions through 6.8.1) lets remote unauthenticated attackers coerce the server into fetching attacker-chosen internal endpoints. The flaw lives in the _is_safe_url blocklist check, which validates the literal hostname but never re-checks the address returned by DNS resolution - so a hostname that resolves to a private, loopback, or cloud-metadata address slips past the filter. Supplied as an image or audio URL to an agent, this can be abused to reach internal services and exfiltrate cloud credentials. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not listed in CISA KEV.