A vulnerability in the yudao-module-ai image service of ruoyi‑vue‑pro allows an authenticated attacker to supply a referImageUrl or imageUrl that forces the server to issue an HTTP request via Hutool HttpUtil.downloadBytes(). By pointing these URLs to loopback, private or cloud metadata addresses the attacker can have the application fetch data from resources that are normally only reachable from within the environment, potentially exposing internal service responses or metadata.

Vendor YunaiV, product ruoyi‑vue‑pro, affected through the 2026.09 release. Any installation of ruoyi‑vue‑pro version 2026.09 or earlier is susceptible.

The CVSS score of 5.3 indicates moderate severity. EPSS score is less than 1% (approximately 0.00304) and the vulnerability is not listed in CISA KEV, suggesting limited public exploitation data. The attack requires an authenticated session; however, once authenticated, an attacker can use SSRF to enumerate internal network paths, read internal HTTP responses, or target cloud metadata endpoints. While no remote code execution is possible, the ability to read internal services can lead to credential theft, privilege escalation, and further attacks.