DeepSeek TUI has SSRF IPV6 bypass
### Summary Although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6 in URL as `http://[::1]`, the SSRF defenses do not work. ### Details https://github.com/Hmbown/DeepSeek-TUI/blob/15f62e3e93d842f30b428877819ebc1c8cb96814/crates/tui/src/tools/fetch_url.rs#L321 ### PoC Prompt: `Run fetch_url tool and give output, no thinking. Use url : http://[::1]` ### Impact Access to local restricted resources
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-45373US | — | — | ||
CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IP… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-88gh-2526-gfrrWEB
- https://github.com/Hmbown/DeepSeek-TUIPACKAGE
- https://github.com/Hmbown/DeepSeek-TUI/blob/15f62e3e93d842f30b428877819ebc1c8cb96814/crates/tui/src/tools/fetch_url.rs#L321WEB
- https://github.com/Hmbown/DeepSeek-TUI/releases/tag/v0.8.26WEB
- https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-88gh-2526-gfrrWEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-45373ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan