DeepSeek TUI has SSRF IPV6 bypass
### Summary Although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6 in URL as `http://[::1]`, the SSRF defenses do not work. ### Details https://github.com/Hmbown/DeepSeek-TUI/blob/15f62e3e93d842f30b428877819ebc1c8cb96814/crates/tui/src/tools/fetch_url.rs#L321 ### PoC Prompt: `Run fetch_url tool and give output, no thinking. Use url : http://[::1]` ### Impact Access to local restricted resources
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-45373US | — | — | ||
CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IP… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-88gh-2526-gfrrWEB
- https://github.com/Hmbown/DeepSeek-TUIPACKAGE
- https://github.com/Hmbown/DeepSeek-TUI/blob/15f62e3e93d842f30b428877819ebc1c8cb96814/crates/tui/src/tools/fetch_url.rs#L321WEB
- https://github.com/Hmbown/DeepSeek-TUI/releases/tag/v0.8.26WEB
- https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-88gh-2526-gfrrWEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-45373ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan