Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-76164— Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources

Quick assessment

Affected
ail-project ail-framework
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

AIL 框架在其爬虫提交功能中存在服务器端请求伪造（SSRF）漏洞。拥有较低权限且经过身份验证的用户，若能访问爬虫接口，即可提交任意 URL 进行爬取，而系统未对目标主机进行充分验证。 因此，攻击者可以指示爬虫向本应由应用用户禁止访问的地址发起直接的 HTTP(S) 请求，包括回环地址（localhost）、RFC1918 私有网络地址、链路本地地址以及云元数据服务地址（如 169.254.169.254）。 手动创建的爬虫任务会绕过现有的域名黑名单，因为它们被分配了非零优先级，且普通的 IP 字面量会被视为 We

CVSS 7.1 · High EPSS 0.31% · P24

Affected Version Matrix 1

VendorProduct Version RangeStatus
ail-project ail-framework < 7.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-76164

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources
Source: CVE Program / CVE List V5
Vulnerability Description
AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can therefore be instructed to make direct HTTP(S) requests to addresses that should not be reachable by application users, including loopback addresses, RFC1918 private networks, link-local addresses, and cloud metadata services such as 169.254.169.254. Manual crawler tasks bypass the existing domain blacklist because they are assigned a non-zero priority, and ordinary IP literals are classified as web targets and fetched directly rather than through Tor or another proxy. Consequently, an attacker can use the AIL server as a network pivot to access services available from the server's network context. Responses generated by these requests, including captured HTML, screenshots, and HAR data, can subsequently be accessed through the crawler interface. This makes the SSRF non-blind and may allow an attacker to disclose sensitive internal application data, service information, or cloud instance metadata and credentials. The patch introduces validation that resolves crawler destinations and rejects URLs resolving to non-global IP addresses, addressing localhost, private-network, and link-local targets.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
ail-project ail-framework 0 ~ 7.0 -

II. Public POCs for CVE-2026-76164

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 6817 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-76164

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: ail-framework
Same vendor: ail-project
Same weakness: CWE-918

V. Comments for CVE-2026-76164

No comments yet

Leave a comment