6.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-67743

CVE-2025-67743: Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service

Local Deep Research is an AI-powered research assistant for deep, iterative research. In versions from 1.3.0 to before 1.3.9, the download service (download_service.py) makes HTTP requests using raw requests.get() without utilizing the application's SSRF protection (safe_requests.py). This can allow attackers to access internal services and attempt to reach cloud provider metadata endpoints (AWS/GCP/Azure), as well as perform internal network reconnaissance, by submitting malicious URLs through the API, depending on the deployment and surrounding controls. This issue has been patched in version 1.3.9.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-67743

CVE-2025-67743:

6.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
local-deep-research	pip	>= 1.3.0, < 1.3.9	1.3.9

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a classic Server-Side Request Forgery (SSRF) identified as CWE-918. It stems from the direct use of Python's requests library for making HTTP requests without proper validation of the target URL. The application has a security mechanism (safe_requests.py) to prevent SSRF, but it was bypassed in several locations.

The most critical area is the download_service.py, where functions responsible for downloading files from URLs were using requests.get() directly. As described in the attack vector, an attacker could submit a malicious URL pointing to an internal network resource. When the download is triggered, the application would make a request to the internal resource, allowing the attacker to scan the internal network, access sensitive data, or interact with cloud metadata services.

The patch addresses this by replacing all occurrences of requests.get(), requests.post(), and requests.Session() with their safe counterparts (safe_get(), safe_post(), and SafeSession()). These wrapper functions ensure that all outgoing requests are validated against a deny-list of private and restricted IP addresses.

The identified vulnerable functions are the ones directly involved in the download process as described in the vulnerability report. During an exploit, these functions would appear in a runtime profile as they are the ones making the unauthorized network requests. The fix in base.py is also crucial as it secures all downloader classes inheriting from BaseDownloader.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.