Junglewise Threat Intelligence

CVE-2026-46526: LearningCircuit Local Deep Research SSRF via parser differential

CVE-2026-46526 · Severity: medium · CVSS 5 · Published 2026-05-28

Vendors: PyPI.

Executive brief

Local Deep Research is an AI-powered research assistant used for conducting iterative, deep-dive research. A security flaw in how the application validates web addresses (URLs) allows attackers to bypass safety checks and force the system to make requests to internal servers or cloud metadata services. This could lead to the exposure of sensitive internal data or cloud credentials, potentially compromising the infrastructure where the assistant is hosted.

Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in Local Deep Research due to a parser differential between the 'urllib.parse.urlparse' library used for validation and the 'urllib3' library used by 'requests' to fetch content. Specifically, URLs containing backslashes (e.g., http://127.0.0.1\@1.1.1.1) are parsed differently: the validator sees the external host (1.1.1.1), while the HTTP client connects to the internal host (127.0.0.1). This allows an authenticated attacker to bypass 'validate_url' checks and reach internal loopback services or cloud metadata endpoints (AWS, Azure, etc.). The vulnerability is fixed in version 1.6.10 by switching the validator to use the 'urllib3' parser and implementing stricter RFC 3986 character filtering.

Affected products

  • LearningCircuit local-deep-research < 1.6.10

Timeline

  • 2026-05-08: patched: Fixes merged into main branch via PR #3873
  • 2026-05-28: advisory: CVE-2026-46526 published

References

Related threats