Next AI Draw.io through 0.4.16 is vulnerable to a server‑side request forgery on the POST /api/parse-url endpoint. The hostname validation only performs a string pattern check and does not resolve DNS, which allows an unauthenticated attacker to supply a hostname that bypasses the check yet resolves to an internal IP. The attacker can therefore reach arbitrary internal HTTP services and exfiltrate their responses, including cloud‑instance metadata. This weakness is identified as CWE‑918.

DayuanJiang’s Next AI Draw.io, any release up to and including version 0.4.16. The vulnerability occurs in the parse‑url API exposed by this application.

The CVSS score of 7.7 reflects a high‑severity flaw with wide impact. Because the endpoint is unauthenticated and the server must perform an outbound request, exploitation requires only network access to the application and the ability to POST the crafted hostname. The EPSS score is not available, and the vulnerability is not yet listed in the CISA KEV catalog, but the lack of authentication and the potential for internal data exposure make it a high‑risk target for attackers.