{
  "id": 4134645,
  "title": "How I Found an SSRF in an AI SDK's OAuth Metadata Discovery",
  "url": "https://urgent.news/2026/08/29/how-i-found-an-ssrf-in-an-ai-sdks-oauth-metadata-discovery",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-29T07:14:55.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/thecrazyrabbit/how-i-found-an-ssrf-in-an-ai-sdks-oauth-metadata-discovery-4mkp"
  },
  "original_language": "en",
  "account": "An SSRF (Server-Side Request Forgery) vulnerability was discovered in a popular AI SDK's OAuth metadata discovery process. The issue arose from insufficient validation in one part of the authentication flow, while another part contained proper validation. The SDK fetched OAuth metadata by making requests to a server URL provided by the developer. If an attacker could control this server URL, they could make the SDK fetch internal addresses, potentially leading to credential theft or internal reconnaissance. The vulnerability existed due to the missing validation on the metadata discovery path and the redirect-follow behavior in the fetch function. The fix required adding URL validation to the metadata discovery path and addressing the redirect-follow behavior.",
  "summary": "Some bugs announce themselves. You're reading through a codebase and the vulnerability practically waves at you from the screen. This was not one of those bugs. This one required me to ask a question that I almost didn't ask. And that question led down a rabbit hole that ended with a server-side request forgery in a fairly popular AI SDK. The Context I've been doing security reviews of AI-related…",
  "key_points": [
    "SSRF vulnerability found in AI SDK's OAuth metadata discovery",
    "Insufficient validation in authentication flow allowed internal address fetching",
    "Fix required URL validation and redirect-follow behavior addressing"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}