CVE Explorer

CVE-2025-67743

Local Deep Research is an AI-powered research assistant for deep, iterative research. In versions from 1.3.0 to before 1.3.9, the download service (download_service.py) makes HTTP requests using raw requests.get() without utilizing the application's SSRF protection (safe_requests.py). This can allow attackers to access internal services and attempt to reach cloud provider metadata endpoints (AWS/GCP/Azure), as well as perform internal network reconnaissance, by submitting malicious URLs through

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a08cbe285ac5f948f9e8a6de59afba6de3e8c7a45ec5c53e06fc476634e93607

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"local-deep-research","vendor":"LearningCircuit","versions":[{"status":"affected","version":">= 1.3.0, < 1.3.9"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c9f227fdc6bd803c01bbb55939bfb5ba66eec6c7dd71e1d53cbec7d2cff89620 · sha256:8791b48b0764a3a4… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:c9f227fdc6bd803c01bbb55939bfb5ba66eec6c7dd71e1d53cbec7d2cff89620 · sha256:8791b48b0764a3a4… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-918","description":"CWE-918: Server-Side Request Forgery (SSRF)","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:c9f227fdc6bd803c01bbb55939bfb5ba66eec6c7dd71e1d53cbec7d2cff89620 · sha256:8791b48b0764a3a4… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions

{"name":"https://github.com/LearningCircuit/local-deep-research/commit/b79089ff30c5d9ae77e6b903c408e1c26ad5c055","tags":["x_refsource_MISC"],"url":"https://github.com/LearningCircuit/local-deep-research/commit/b79089ff30c5d9ae77e6b903c408e1c26ad5c055"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c9f227fdc6bd803c01bbb55939bfb5ba66eec6c7dd71e1d53cbec7d2cff89620 · sha256:8791b48b0764a3a4… · /containers/cna/references/1

{"name":"https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-9c54-gxh7-ppjc","tags":["x_refsource_CONFIRM"],"url":"https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-9c54-gxh7-ppjc"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c9f227fdc6bd803c01bbb55939bfb5ba66eec6c7dd71e1d53cbec7d2cff89620 · sha256:8791b48b0764a3a4… · /containers/cna/references/0

{"tags":["exploit"],"url":"https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-9c54-gxh7-ppjc"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c9f227fdc6bd803c01bbb55939bfb5ba66eec6c7dd71e1d53cbec7d2cff89620 · sha256:8791b48b0764a3a4… · /containers/adp/0/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer