Executive brief
MegaParse is a file parser designed for processing documents (PDFs, Word files, PowerPoint) for use with language models. An unauthenticated attacker can submit internal or metadata service URLs to the application, causing it to fetch and return the responses directly. This allows unauthorized access to sensitive internal services, cloud metadata endpoints (like AWS credentials), and other network resources that should not be exposed to the internet.
Technical details
The POST /v1/url endpoint in MegaParse 0.0.55 lacks input validation and authentication controls, accepting caller-supplied URLs and fetching them server-side without restriction. The vulnerability is a classic server-side request forgery (SSRF) that allows an attacker to read HTTP responses from arbitrary internal services, metadata endpoints (e.g., http://169.254.169.254/latest/meta-data/), or other network-accessible URLs. The endpoint returns the fetched content in the JSON response, directly exposing sensitive data to the attacker. No authentication is required to exploit this vulnerability. Patches or mitigations involving URL validation, authentication enforcement, and internal network segmentation are needed.
Affected products
- The Vibe Company MegaParse 0.0.55
Timeline
- 2026-09-04: disclosed