Open‑WebSearch contains a vulnerability in the URL safety checks used by the fetchWebContent tool. The functions isPublicHttpUrl and assertPublicHttpUrl fail to reject bracketed IPv6 literals and do not perform DNS resolution, allowing an attacker to supply a crafted URL that the tool will resolve and fetch. The fetched content is returned to the caller, resulting in a non‑blind SSRF that can leak arbitrary data. This flaw is classified as CWE‑918.

All installations of Aas‑ee open‑webSearch older than version 2.1.7 are affected. The issue exists in the MCP server, CLI, and local daemon components. Users running any pre‑2.1.7 release of this project are vulnerable.

The vulnerability has a CVSS score of 8.2 and is not listed in the CISA KEV catalog. EPSS data is not available, but the lack of DNS resolution and bracketed IPv6 support create an exploitation path that can be invoked remotely if the service is reachable from an attacker. Successful exploitation would grant the attacker the ability to read arbitrary resources and exfiltrate their content, potentially compromising sensitive information or internal infrastructure.