The CloudTAK product's ESRI helper routes (/api/esri*) accept user-controlled URLs and fetch them without applying IP or hostname classification to block private, loopback, or link-local addresses. Any authenticated user can exploit this to make the server issue arbitrary HTTP requests to internal network endpoints, including cloud instance metadata services (e.g., 169.254.169.254) and localhost ports. The vulnerability is a full-read SSRF, meaning the response body from the internal request is returned to the attacker, enabling data exfiltration. The existing URL classifier only checks the URL pathname and does not prevent access to internal IPs. The vulnerability affects all versions up to and including 13.7.0, with no vendor advisory or patch currently available. The SSRF guard helper is present elsewhere in the product but was not integrated into the ESRI routes, leaving this attack surface unprotected.

An attacker with any authenticated token can perform arbitrary HTTP GET or POST requests from the CloudTAK server to internal network resources that are normally inaccessible externally. This includes cloud instance metadata services that expose temporary IAM credentials, loopback admin interfaces, and other internal services within the deployment VPC. The attacker receives the full response body, enabling enumeration and exfiltration of sensitive internal data. This can lead to privilege escalation, unauthorized access to internal systems, and compromise of cloud credentials.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the /api/esri* routes to trusted users only and consider network-level controls to prevent the CloudTAK server from making outbound requests to sensitive internal IP ranges. Monitor for unusual usage of these endpoints. The vendor's existing SSRF guard helper should be integrated into the ESRI routes to validate and block unsafe URLs before fetching.