In ClaraVerse 0.3.1, the download_file and scrape_web agent tools expose a server‑side request forgery flaw whereby authenticated users can bypass hostname validation and IPv6 transition address filtering, permitting the server to request internal services and cloud instance metadata endpoints. This bypass allows an attacker with legitimate credentials to access sensitive internal data or cloud metadata, potentially compromising confidentiality and integrity of the system's internal resources.

The vulnerability affects claraverse-space:ClaraVerse version 0.3.1; only the download_file and scrape_web components contain the bypass. No other versions are listed as affected.

The CVSS score of 5.3 classifies this as a medium‑severity issue. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. An attacker must be authenticated to exploit the flaw, which limits the threat surface but still permits the attacker to reach internal and cloud‑metadata endpoints through SSRF. The attack vector is internal traffic initiated from the server to arbitrary URLs supplied by the authenticated user.