The vulnerability in steipete summarize before version 0.15.1 allows an attacker to exploit the hover summary feature by dispatching synthetic mouseover events on attacker-controlled links. This triggers the extension to make authenticated daemon requests using stored tokens without verifying event trustworthiness. Consequently, the attacker can cause the extension to send requests to local or private network URLs, potentially accessing sensitive internal endpoints. The CVSS 4.6 score reflects a medium severity with network attack vector, low complexity, partial attack complexity, no privileges required, and user interaction needed. There is no vendor advisory or patch information available at this time.

An attacker can leverage this SSRF vulnerability to make the summarize extension send authenticated requests to internal or local network resources on behalf of the user. This could lead to unauthorized access to sensitive internal endpoints that are not normally accessible externally. However, exploitation requires user interaction (hovering over attacker-controlled links) and the attack complexity is partial, limiting the ease of exploitation. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with untrusted content that may trigger hover events in the summarize extension. Avoid hovering over suspicious links in environments where sensitive internal endpoints could be exposed.