Summarize versions before 0.17.1 contain a server-side request forgery (SSRF) vulnerability. This flaw allows attackers controlling a podcast RSS feed to cause the host to fetch transcript content from internal or reserved network addresses by supplying malicious podcast:transcript URLs. The vulnerability enables bypassing protections via DNS rebinding and redirect techniques, as redirect targets are not revalidated and hostnames are not resolved before the request is dispatched. The issue is fixed in version 0.17.1.
Summarize versions prior to 0.15.1 have a vulnerability in the hover summary feature that allows malicious web pages to dispatch synthetic mouseover events on attacker-controlled links. This causes the extension to make authenticated daemon requests using stored tokens without verifying the trustworthiness of the events. Attackers can exploit this to route authenticated requests through the daemon to local or private network URLs, potentially accessing sensitive internal endpoints when users interact with the malicious content. The issue is fixed in version 0.15.1.
Summarize versions prior to 0.15.1 have a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. This enables attackers to manipulate the agent via malicious page or summary content to invoke enabled extension automation tools, bypassing the final user approval step during user interaction with attacker-controlled content. The vulnerability is fixed in version 0.15.1.
Summarize browser extension versions prior to 0.15.1 contain a missing authorization vulnerability in the content script's window.postMessage bridge. This flaw allows malicious web pages to perform unauthorized operations on automation artifacts within the affected tab by simulating runtime messages with spoofed sender identifiers. The vulnerability enables attackers to list, read, create, overwrite, or delete these artifacts without proper authorization checks. A fix is available in version 0.15.1.
The Summarize software prior to version 0.15.1 contains a path traversal vulnerability in its /v1/summarize daemon endpoint. Authenticated users can exploit this flaw by providing an absolute path or directory traversal sequence in the slidesDir parameter, enabling them to write slide_*.png and slides.json files to arbitrary writable directories. They can also delete matching files at those locations through repeated extraction. This vulnerability is fixed in version 0.15.1.
A vulnerability in the Summarize daemon prior to version 0.15.1 allows local attackers to read sensitive configuration files due to insecure default filesystem permissions. These permissions may make the daemon configuration directory and file world-readable on Unix-like systems, exposing bearer tokens and API credentials stored in ~/.summarize/daemon.json. This exposure can lead to unauthorized access to the daemon or recovery of sensitive API keys.