This vulnerability is a Server‑Side Request Forgery (SSRF) in ToolJet's RestAPI data source. The component executes HTTP requests on the server side and only validates the hostname string when filtering private IP addresses. Names such as 169.254.169.254.nip.io resolve to Azure's Instance Metadata Service address, allowing the filter to be bypassed. An attacker who is authenticated to ToolJet, including free‑tier users, can send a crafted request that retrieves the Azure managed identity token used by the application’s AKS cluster. Possessing that token can lead to unauthorized access to Azure resources and potentially broader system compromise. The weakness is identified as CWE‑918.

ToolJet version 3.20.178‑lts and earlier. The SSRF affects the RestAPI data source component of the ToolJet open‑source platform, used for building internal tools, workflows, and AI agents.

The CVSS score is 8.3, indicating high severity. No EPSS data is available, and the vulnerability is not listed in CISA's KEV catalog, suggesting limited but not negligible exploitation potential. Attackers must be authenticated, which is possible for all free‑tier users. Once the SSRF succeeds, the attacker can silently obtain Azure tokens that grant elevated privileges. The risk is therefore high for organizations running affected ToolJet instances, especially those with production clusters exposed to the Internet.