ClaraVerse through version 0.3.1 contains SSRF protection bypasses in the download_file and scrape_web agent tools. Authenticated users can circumvent hostname validation and IPv6 transition address filtering mechanisms, allowing them to induce the server to send requests to internal network services and cloud instance metadata endpoints. This vulnerability could be exploited to access sensitive internal resources that are not normally exposed externally.

An authenticated user can exploit this vulnerability to make the server perform unauthorized requests to internal services and cloud instance metadata endpoints. This may lead to information disclosure or further internal network attacks depending on the internal services accessible via SSRF. The CVSS 4.0 base score is 5.3 (medium severity), reflecting the moderate impact and the requirement for authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. In the meantime, restrict authenticated user permissions where possible and monitor for unusual internal request patterns related to the affected agent tools.