CVE-2025-67743

Local Deep Research is an AI-powered research assistant for deep, iterative research. In versions from 1.3.0 to before 1.3.9, the download service (download_service.py) makes HTTP requests using raw requests.get() without utilizing the application's SSRF protection (safe_requests.py). This can allow attackers to access internal services and attempt to reach cloud provider metadata endpoints (AWS/GCP/Azure), as well as perform internal network reconnaissance, by submitting malicious URLs through the API, depending on the deployment and surrounding controls. This issue has been patched in version 1.3.9.

• CWE-918

• https://github.com/LearningCircuit/local-deep-research/commit/b79089ff30c5d9ae77e6b903c408e1c26ad5c055Patch
• https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-9c54-gxh7-ppjcExploit, Vendor Advisory
• https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-9c54-gxh7-ppjcExploit, Vendor Advisory

Published

Dec 23, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67738squid/cachemgr.cgi in Webmin before 2.600 does not properly …8.5
• CVE-2025-67739In JetBrains TeamCity before 2025.11.2 improper repository U…3.1
• CVE-2025-6774A vulnerability was found in gooaclok819 sublinkX up to 1.8.…6.3
• CVE-2025-67740In JetBrains TeamCity before 2025.11 improper access control…5.3
• CVE-2025-67741In JetBrains TeamCity before 2025.11 stored XSS was possible…5.4
• CVE-2025-67742In JetBrains TeamCity before 2025.11 path traversal was poss…7.5
• CVE-2025-67744DeepChat is an open-source artificial intelligence agent pla…9.6
• CVE-2025-67745MyHoard is a daemon for creating, managing and restoring MyS…7.5
• CVE-2025-67746Composer is a dependency manager for PHP. In versions on the…4.3
• CVE-2025-67747Fickling is a Python pickling decompiler and static analyzer…7.8
• CVE-2025-67748Fickling is a Python pickling decompiler and static analyzer…7.8
• CVE-2025-67749PCSX2 is a free and open-source PlayStation 2 (PS2) emulator…5.3