CVE-2026-76164 is an SSRF vulnerability in the ail-framework's crawler submission functionality. Low-privileged authenticated users can submit URLs that bypass domain blacklists and are fetched directly, including internal network addresses and cloud metadata endpoints. The crawler executes these requests and stores responses accessible via the interface, making the SSRF non-blind and enabling data disclosure. The vulnerability affects ail-framework versions from 0 up to but not including 7.0. The patch adds validation to reject URLs resolving to localhost, private, and link-local IP addresses.

An attacker with low-privileged authenticated access can leverage the SSRF to make the server perform HTTP(S) requests to internal or restricted network resources. This can lead to unauthorized disclosure of sensitive internal data, including cloud instance metadata and credentials, as well as other internal services not normally accessible to the attacker. The SSRF is non-blind, meaning the attacker can view the responses, increasing the risk of information leakage.

A patch has been released that introduces validation to reject crawler URLs resolving to non-global IP addresses, including localhost, private networks, and link-local addresses. Users should upgrade ail-framework to version 7.0 or later to remediate this vulnerability. No additional mitigation is required if the patch is applied.