The vulnerability originates from unsanitized manipulation of the baseURL argument in the Model Provider API route. By supplying a crafted URL, an attacker can cause the server to send outbound requests to arbitrary destinations, potentially accessing internal resources or exfiltrating data. The flaw allows remote exploitation and an exploit has already been published and may be used.

ItzCrazyKns Vane versions up to 1.12.1 are affected. The issue occurs in the file src/app/api/providers/route.ts of the component Model Provider API.

The CVSS score of 6.9 indicates moderate severity. Although the EPSS score is not available, the public availability of the exploit suggests a realistic threat. The attack vector is remote HTTP access to the API route and requires no local privileges. The flaw is not listed in the CISA KEV catalog, but the documented exploit warrants immediate attention.