CVE-2026-63731 describes an SSRF vulnerability in HyperDX prior to version 2.31.0. Authenticated users can supply a host parameter to the ClickHouse proxy test endpoint, which does not validate or restrict the URL, allowing the server to be directed to internal network resources. The vulnerability enables attackers to retrieve internal service responses, potentially exposing sensitive internal APIs, containerized services, and cloud provider metadata endpoints. The CVSS 4.0 base score is 6.3, reflecting a medium severity with network attack vector, low attack complexity, and requiring low privileges but no user interaction.

Exploitation of this SSRF vulnerability can lead to unauthorized disclosure of internal service responses, including access to internal APIs, container services, and cloud metadata endpoints. This may facilitate further internal reconnaissance or attacks within the affected environment. The vulnerability requires authenticated access, limiting exposure to team members with credentials.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict authenticated user access to trusted personnel only and monitor usage of the ClickHouse proxy test endpoint. Avoid exposing this endpoint to untrusted networks. Follow vendor updates for patch releases addressing this vulnerability.