CVE-2026-76164 is an SSRF vulnerability in the ail-framework's crawler submission feature. Authenticated users with low privileges can submit URLs that the crawler fetches without proper destination validation. Manual crawler tasks bypass domain blacklists and fetch IP literals directly, enabling requests to internal network addresses including localhost, RFC1918 private networks, link-local addresses, and cloud metadata endpoints like 169.254.169.254. The responses from these requests are accessible through the crawler interface, making the SSRF non-blind and potentially exposing sensitive internal data and credentials. The vulnerability affects ail-framework versions before 7.0. The vendor has patched this by adding validation to reject URLs resolving to non-global IP addresses.

An attacker with low-privileged authenticated access can exploit this SSRF vulnerability to make the server perform HTTP(S) requests to internal network resources that are normally inaccessible. This can lead to disclosure of sensitive internal application data, service information, and cloud instance metadata including credentials. The SSRF is non-blind, as the attacker can view the responses, increasing the risk of information leakage and potential further attacks pivoting from the server's network context.

A patch has been introduced that validates crawler submission URLs by resolving their destinations and rejecting those that resolve to non-global IP addresses, including localhost, private networks, and link-local addresses. Users should upgrade to ail-framework version 7.0 or later where this fix is implemented. Until patched, restrict crawler interface access to trusted users and monitor for suspicious crawler submissions. Patch status is not explicitly confirmed in the advisory, but the described fix indicates an official remediation is available in version 7.0.