This vulnerability in LiteSpeed Cache (<= 7.0.1) allows an attacker with low privileges to perform SSRF attacks, where the server can be tricked into making unintended requests. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change. The impact includes low confidentiality and integrity loss but no availability impact. The vulnerability was reserved in May 2025 and published in September 2025. No patch or mitigation details are provided in the available data.

An attacker with low privileges can exploit this SSRF vulnerability to cause the server to make unauthorized requests, potentially exposing sensitive information (confidentiality impact) and modifying data (integrity impact) within the scope of the affected system. There is no impact on availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected LiteSpeed Cache versions and monitor for unusual server request activity related to SSRF attempts.