An SSRF vulnerability in the IKEA Dirigera hub allows an authenticated attacker to exfiltrate sensitive private keys, posing a significant risk to local network security.

This vulnerability is a Server-Side Request Forgery (CWE-918) occurring in the IKEA Dirigera hub. Based on the CVSS vector (PR:H), this flaw requires high privileges to exploit, meaning an attacker must already have authenticated administrative access to the device to trigger the malicious request.

The ability to exfiltrate private keys represents a critical compromise of the device's cryptographic identity and local security posture. With a CVSS score of 7.5, this high-severity vulnerability could allow an attacker to pivot within the local network or impersonate the device, leading to broader unauthorized access. The potential for loss of confidentiality regarding internal network credentials necessitates immediate attention to device configuration and access controls.

Immediate Action: Restrict access to the IKEA Dirigera administrative interface to trusted management subnets only, as a patch status is currently unknown.

Proactive Monitoring: Review device access logs for suspicious outbound traffic or unusual HTTP requests initiated by the Dirigera hub that deviate from standard smart home integration patterns.

Compensating Controls: Implement network-level egress filtering to prevent the Dirigera hub from initiating connections to unauthorized external or internal segments, effectively mitigating the SSRF impact.

Public Exploit Available: No (exploit_available: false).

Given the severity of potential key exfiltration, administrators should treat the IKEA Dirigera hub as a sensitive network component. Ensure that administrative access is strictly limited to authorized personnel and monitor the device for any anomalous network behavior until the vendor provides a firmware update to resolve the underlying SSRF flaw.