IBM Turbonomic kubeturbo agent versions 8.16.0 through 8.21.2 contain a server-side request forgery (SSRF) vulnerability. An authenticated attacker could exploit this flaw to send unauthorized requests from the affected system, potentially enabling network enumeration or aiding other attacks. The vulnerability has a medium severity rating with a CVSS score of 5.4. No patch or remediation information is currently provided.