The QuantumNous new-api, an LLM gateway and AI asset management system, had an SSRF vulnerability (CWE-918) before version 0.12.0-alpha.1. The default SSRF protection did not apply IP filtering to hostnames because the ApplyIPFilterForDomain setting was disabled by default. URL validation only checked domain allow/block rules without resolving hostnames to validate their IP addresses. This allowed authenticated users to specify Webhook, Bark, or Gotify notification URLs pointing to internal or metadata IP addresses. The vulnerability is addressed in version 0.12.0-alpha.1 by enabling proper IP filtering on resolved hostnames.

An attacker with authentication privileges could exploit this SSRF vulnerability to make the server send requests to internal or metadata IP addresses, potentially exposing sensitive internal resources or metadata services. The CVSS score of 7.7 (high) reflects the network attack vector, low complexity, required privileges, no user interaction, and high confidentiality impact without integrity or availability impact.

Upgrade QuantumNous new-api to version 0.12.0-alpha.1 or later, where the SSRF vulnerability is fixed by enabling IP filtering on resolved hostnames. Since this is an official fix, applying this update is the recommended remediation. Patch status is confirmed fixed in 0.12.0-alpha.1. No other mitigations are indicated by the vendor advisory.