Description
Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.10, the URL checking logic in local-deep-research has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. The current project uses validate_url to validate the input URL. The main logic is to perform security checks on the host portion of the URL extracted by urlparse to prevent SSRF attacks. However, there are indeed differences in parsing between urlparse and the library that actually sends the request. For example, in safe_get, validate_url is first used to perform an SSRF check, and then requests.get is used to send the actual request. This vulnerability is fixed in 1.6.10.
Published: 2026-05-28
Score: 5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an SSRF bypass in the safe_get function of Local Deep Research. Prior to version 1.6.10, URL validation performed by validate_url could be evaded due to differences in URL parsing between urlparse and the requests library, allowing an attacker to supply a URL that is falsely considered safe and causing the application to retrieve arbitrary internal resources. This flaw enables potential internal network access or data exposure through SSRF.

Affected Systems

Local Deep Research by LearningCircuit. All versions before 1.6.10 are affected. The remediation is available in release v1.6.10 and later.

Risk and Exploitability

With a CVSS score of 5, this vulnerability is considered medium. EPSS is not available, and it is not listed in CISA KEV. The likely attack vector is sending crafted URLs to safe_get; the attacker must be able to influence the application’s input. The flaw permits the application to perform internal requests, potentially exposing sensitive internal resources or services. Once the attacker can supply a malicious URL, the impact can be significant within the internal network.

Generated by OpenCVE AI on May 28, 2026 at 21:05 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to version 1.6.10 or later.
  • If an upgrade is not immediately possible, restrict safe_get to only allow whitelisted domains or block internal IP ranges.
  • Configure network controls or a proxy to prevent the application from reaching internal services.

Generated by OpenCVE AI on May 28, 2026 at 21:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-g23j-2vwm-5c25 local-deep-research has an SSRF bypass in `safe_get`
History

Fri, 29 May 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 28 May 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Learningcircuit
Learningcircuit local Deep Research
Vendors & Products Learningcircuit
Learningcircuit local Deep Research

Thu, 28 May 2026 19:00:00 +0000

Type Values Removed Values Added
Description Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.10, the URL checking logic in local-deep-research has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. The current project uses validate_url to validate the input URL. The main logic is to perform security checks on the host portion of the URL extracted by urlparse to prevent SSRF attacks. However, there are indeed differences in parsing between urlparse and the library that actually sends the request. For example, in safe_get, validate_url is first used to perform an SSRF check, and then requests.get is used to send the actual request. This vulnerability is fixed in 1.6.10.
Title Local Deep Research: SSRF bypass in `safe_get`
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N'}

Subscriptions

Learningcircuit Local Deep Research
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-05-29T14:05:55.976Z

Reserved: 2026-05-14T19:12:32.755Z

Link: CVE-2026-46526

cve-icon Vulnrichment

Updated: 2026-05-29T14:05:07.559Z

cve-icon NVD

Status : Received

Published: 2026-05-28T19:16:39.430

Modified: 2026-05-29T15:16:23.987

Link: CVE-2026-46526

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-28T21:15:27Z

Weaknesses