SSRF
SSRF (Server-Side Request Forgery) is a vulnerability where an attacker tricks a server, or an AI agent calling tools on its behalf, into requesting a destination the attacker chooses rather than the one intended. A classic example is a "fetch this image URL" feature pointed at an internal address like a cloud metadata endpoint, getting the server to reach places that aren't reachable from the public internet at all. The risk has grown with AI agents and MCP tool integrations, because an agent that can fetch arbitrary URLs on a user's behalf is itself a server-side requester, steerable by untrusted input the agent reads mid-task. Mitigations include allow-listing destinations, blocking requests to private/link-local and metadata addresses by default, and validating any URL from untrusted input before the request is made, not after.
By AdminKit team, Netbase JSC · Updated