{"data":{"id":"f3bd2b5d-183e-4be7-8c34-10507b8c40a8","title":"GHSA-96ff-gc8g-wpvg: DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool","summary":"DeepSeek TUI's fetch_url tool checks the initial URL's resolved IP against an is_restricted_ip() blocklist, but its reqwest HTTP client follows up to five redirects without re-validating each target. A public URL that redirects to 169.254.169.254 therefore reaches the restricted address, and the researcher confirmed a 302 redirect was followed to that IP and to an attacker-controlled host. On cloud-hosted instances, prompt injection can drive this to exfiltrate IAM credentials and instance metadata.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-96ff-gc8g-wpvg","publishedAt":"2026-05-14T20:29:26.000Z","cveId":"CVE-2026-45310","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["prompt_injection","supply_chain"],"issueType":"vulnerability","affectedPackages":["deepseek-tui@< 0.8.22 (fixed: 0.8.22)","deepseek-tui-cli@< 0.8.22 (fixed: 0.8.22)","deepseek-tui@< 0.8.22 (fixed: 0.8.22)"],"affectedPackageNames":["deepseek-tui","deepseek-tui-cli"],"affectedPackageRefs":["cargo:deepseek-tui","cargo:deepseek-tui-cli","npm:deepseek-tui"],"affectedVendors":[],"affectedVendorsRaw":["DeepSeek TUI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00279,"epssCheckedAt":"2026-11-07T00:12:13.369Z","kevDateAdded":null,"advisoryAliases":["GHSA-96ff-gc8g-wpvg"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-14T20:29:26.000Z","fixReleasedAt":"2026-05-08T22:10:59.715Z","daysToFix":-6,"fixCheckedAt":"2026-10-29T21:36:04.077Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010","AML.T0051"],"fixes":[{"ecosystem":"npm","name":"deepseek-tui","fixedVersion":"0.8.22","matchedVersion":"0.8.22","fixReleasedAt":"2026-05-08T22:12:55.756Z","daysToFix":-6,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:36:03.926Z"},{"ecosystem":"cargo","name":"deepseek-tui","fixedVersion":"0.8.22","matchedVersion":"0.8.22","fixReleasedAt":"2026-05-08T22:12:09.533Z","daysToFix":-6,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:36:03.926Z"},{"ecosystem":"cargo","name":"deepseek-tui-cli","fixedVersion":"0.8.22","matchedVersion":"0.8.22","fixReleasedAt":"2026-05-08T22:10:59.715Z","daysToFix":-6,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:36:03.926Z"}]}}