Executive brief
Composio is a Python library that provides toolkit integration and AI agent capabilities, including a BROWSERTOOL for web interaction. A server-side request forgery (SSRF) vulnerability in the BROWSERTOOL_GOTO_PAGE and BROWSERTOOL_GET_PAGE_DETAILS actions allows attackers to read arbitrary files from the system where Composio is running. An attacker with administrative privileges can exploit this to access sensitive configuration files, credentials, or other system data.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in the composio-core library (CWE-918, CWE-643) affecting version 0.4.4 and likely all earlier versions. The vulnerability resides in the BROWSERTOOL_GOTO_PAGE and BROWSERTOOL_GET_PAGE_DETAILS actions, which fail to properly validate or sanitize URLs before processing them. An authenticated attacker with high privileges can craft malicious requests using file:// or other protocol handlers to read arbitrary files from the filesystem. The vulnerability requires network access and high privilege level (PR:H), making it exploitable primarily by internal or privileged actors, not unauthenticated external users. A patch or update availability is not explicitly mentioned in the advisory.
Affected products
- ComposioHQ composio-core 0.1.82 through 0.4.4
Timeline
- 2025-03-20: disclosed
- 2025-03-20: advisory: GHSA-38mg-wm59-g64x published