TaskingAI versions up to 0.3.0 allow an authenticated attacker to craft an action that contains an unvalidated OpenAPI servers[0].url field. The backend will then perform an HTTP request to the supplied URL, enabling Server‑Side Request Forgery. This flaw is identified as CWE‑918 and lets the attacker read up to 64 KiB from the response, potentially exposing internal network resources or cloud metadata.

The affected product is TaskingAI, specifically releases up to and including v0.3.0. Attackers with either a project API key or a console admin login can exploit the vulnerability.

The CVSS score is 5.3, indicating moderate severity. EPSS score is 0.00223 (<1%), indicating a very low but non‑zero probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Because the flaw is limited to users with valid project credentials or administrative access, it requires successful authentication, but an attacker could use any legitimate API key or admin session to trigger SSRF actions.