The vulnerability resides in the FileResolver component of a2ui, where the httpx.get function can be manipulated to forge server‑side requests. This SSRF flaw allows an attacker to initiate arbitrary outbound HTTP connections from the application, potentially exposing internal services or sensitive data and serving as a launchpad for more extensive attacks. The weakness is classified as CWE‑918, reflecting unsafe URL handling and validation.

The a2ui application provided by a2ui‑project, versions up to and including 0.10.7, is impacted. The FileResolver component processes user‑supplied URLs and is the specific feature vulnerable to exploitation.

The CVSS score of 6.9 indicates a medium severity, and the EPSS score of less than 1% shows that exploitation is currently unlikely in the wild. The vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known exploits. Attackers can remotely trigger the flaw by supplying crafted URLs to the application, exploiting the lack of validation in the httpx.get call. Once triggered, the affected server can reach internal services or external endpoints, providing a foothold for further compromise.