CVE-2025-67743CWE-918ssrf

CVE-2025-67743

Medium · published December 23, 2025

CVSS v3.1
6.3
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

Local Deep Research is an AI-powered research assistant for deep, iterative research. In versions from 1.3.0 to before 1.3.9, the download service (download_service.py) makes HTTP requests using raw requests.get() without utilizing the application's SSRF protection (safe_requests.py). This can allow attackers to access internal services and attempt to reach cloud provider metadata endpoints (AWS/GCP/Azure), as well as perform internal network reconnaissance, by submitting malicious URLs through the API, depending on the deployment and surrounding controls. This issue has been patched in version 1.3.9.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.6th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-12-23T06:15Z
Affected products (1)
ProductVersionsFixed in
learningcircuit/local_deep_research≥ 1.3.0, < 1.3.91.3.9
References (3)
https://github.com/LearningCircuit/local-deep-research/commit/b79089ff30c5d9ae77e6b903c408e1c26ad5c055 · [email protected]https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-9c54-gxh7-ppjc · [email protected]https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-9c54-gxh7-ppjc · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 23 DEC 00:01Z
    Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service
    cvelistv5