The Onion module of the AIL Framework contained a performance shortcut that validated candidate .onion URLs only by checking the string length and the suffix. An attacker could embed a URL that ended in ".onion" and had the required length but whose host portion was an arbitrary IP address or non‑onion domain. The module would slice the host from the string and add it to the crawler task queue as if it were a genuine .onion target. This flaw allowed unauthenticated content publishers to inject arbitrary non‑onion URLs, causing the crawler to process unintended network resources and thus corrupting the integrity of the crawler’s target selection, in violation of proper input validation (CWE‑20).

The vulnerability is present in the AIL Framework’s Onion module before the removal of the length‑based shortcut. The affected product is the AIL Project AIL Framework. No specific version range is listed, but the fix was applied in the commit 5c8a68b3d8c7d7b03e5febe4ac5b5aca91826adb, which removes the shortcut and adds proper hostname parsing and onion‑domain validation.

The CVSS score of 6.9 indicates a moderate impact. Exploitation requires no authentication and no user interaction; the attacker only needs to provide crafted content that the framework will crawl. Although EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog, the vector is straightforward and could be used to alter crawler behavior, making the risk significant for environments where the crawler operates on untrusted inputs.