Executive brief
OWL's DocumentProcessingToolkit is a library for automating document processing tasks in multi-agent systems. A server-side request forgery (SSRF) vulnerability in the extract_document_content tool allows attackers to inject malicious URLs via prompt injection, causing the server to fetch internal resources. The vulnerability could expose sensitive internal data or allow lateral movement within the network.
Technical details
The vulnerability is a server-side request forgery (SSRF) in the extract_document_content tool, which fetches caller-supplied URLs without proper validation of the scheme, host, or IP address. Attackers can leverage prompt injection techniques to inject arbitrary URLs and cause the server to make requests to internal resources. The responses are returned to the agent context, allowing data exfiltration. The vulnerability requires the attacker to control or influence the input to the extract_document_content tool but does not require authentication. A patch availability status is not explicitly indicated in the provided advisory.
Affected products
- CAMEL AI OWL <UNKNOWN>
Timeline
- 2026-09-04: disclosed