Description
AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host.


The crawler can therefore be instructed to make direct HTTP(S) requests to addresses that should not be reachable by application users, including loopback addresses, RFC1918 private networks, link-local addresses, and cloud metadata services such as 169.254.169.254.


Manual crawler tasks bypass the existing domain blacklist because they are assigned a non-zero priority, and ordinary IP literals are classified as web targets and fetched directly rather than through Tor or another proxy. Consequently, an attacker can use the AIL server as a network pivot to access services available from the server's network context.


Responses generated by these requests, including captured HTML, screenshots, and HAR data, can subsequently be accessed through the crawler interface. This makes the SSRF non-blind and may allow an attacker to disclose sensitive internal application data, service information, or cloud instance metadata and credentials.


The patch introduces validation that resolves crawler destinations and rejects URLs resolving to non-global IP addresses, addressing localhost, private-network, and link-local targets.
Published: 2026-08-19
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A server‑side request forgery exists in the AIL Framework crawler. An authenticated user who can submit crawler tasks can specify any URL without validation, causing the framework to fetch data from loopback, RFC1918 private, link‑local or cloud metadata addresses. The retrieved content—including HTML, screenshots and HAR files—is returned through the crawler interface, making the SSRF non‑blind and permitting leakage of internal application data, service information, or cloud instance metadata and credentials.

Affected Systems

The issue is present in the AIL Framework, an open‑source cybersecurity analysis platform. No specific version numbers are provided, so all releases that include the crawler module are potentially affected. Systems that expose the crawler interface to even low‑privileged users are vulnerable.

Risk and Exploitability

The CVSS score of 7.1 denotes high severity, but the EPSS score is below 1 %, indicating low current exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. Attackers must be authenticated and have access to the crawler interface, yet they can pivot the AIL server into internal networks, which is a significant risk for organizations that have exposed crawler functionality.

Generated by OpenCVE AI on August 20, 2026 at 18:52 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Deploy the latest AIL Framework release that includes the crawler URL validation patch, which rejects non‑global IP addresses.
  • Restrict crawler interface access to trusted, privileged users and remove crawler privileges from low‑privileged accounts.
  • Enforce firewall or network segmentation rules that block the AIL server from connecting to internal, private, or metadata IP ranges.

Generated by OpenCVE AI on August 20, 2026 at 18:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 19 Aug 2026 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Ail-project
Ail-project ail-framework
Vendors & Products Ail-project
Ail-project ail-framework

Wed, 19 Aug 2026 09:00:00 +0000

Type Values Removed Values Added
Description AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can therefore be instructed to make direct HTTP(S) requests to addresses that should not be reachable by application users, including loopback addresses, RFC1918 private networks, link-local addresses, and cloud metadata services such as 169.254.169.254. Manual crawler tasks bypass the existing domain blacklist because they are assigned a non-zero priority, and ordinary IP literals are classified as web targets and fetched directly rather than through Tor or another proxy. Consequently, an attacker can use the AIL server as a network pivot to access services available from the server's network context. Responses generated by these requests, including captured HTML, screenshots, and HAR data, can subsequently be accessed through the crawler interface. This makes the SSRF non-blind and may allow an attacker to disclose sensitive internal application data, service information, or cloud instance metadata and credentials. The patch introduces validation that resolves crawler destinations and rejects URLs resolving to non-global IP addresses, addressing localhost, private-network, and link-local targets.
Title Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources
Weaknesses CWE-918
References
Metrics cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N'}

Subscriptions

Ail-project Ail-framework
cve-icon MITRE

Status: PUBLISHED

Assigner: CIRCL

Published:

Updated: 2026-08-19T15:44:51.882Z

Reserved: 2026-08-19T08:53:03.178Z

Link: CVE-2026-76164

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-08-19T09:17:36.830

Modified: 2026-08-26T16:49:18.760

Link: CVE-2026-76164

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-20T19:00:06Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)