Executive brief
A security vulnerability in the Karakeep SDK allows authenticated users to force the server to make unauthorized requests to internal network resources. By bookmarking a specially crafted webpage, an attacker can bypass security filters to access sensitive internal data, such as cloud metadata or private network services. This could lead to the exposure of administrative credentials or internal system information.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in the Karakeep SDK due to an unprotected code path in the HTML parsing subprocess. While the main bookmark URL is validated against a blacklist of private and loopback IP ranges, the 'metascraper-logo-favicon' plugin (v5.49.5) extracts icon URLs from HTML and fetches them using the 'got' HTTP client without invoking the application's 'validateUrl()' protection. An authenticated attacker can exploit this by providing a bookmark URL that contains malicious '<link rel=\"icon\">' tags pointing to internal resources like the AWS Instance Metadata Service (169.254.169.254) or localhost. This allows for internal service discovery and potential credential theft. The issue is fixed in version 0.32.0.
Affected products
- Karakeep @karakeep/sdk <= 0.31.0
Timeline
- 2026-05-08: disclosed: Vulnerability reported to Karakeep
- 2026-05-14: advisory: GitHub Advisory GHSA-7rx4-c5vx-g8w3 published
- 2026-05-14: patched: Fixed in version 0.32.0