The gpt-researcher application is susceptible to an unauthenticated Server-Side Request Forgery vulnerability that allows remote attackers to manipulate internal request targets.

This is a Server-Side Request Forgery (CWE-918) vulnerability located in the ws endpoint. The flaw allows an unauthenticated remote attacker to perform unauthorized requests by manipulating the source_urls argument.

Successful exploitation of this vulnerability allows an attacker to force the server to make unauthorized outbound requests to internal or external resources. This can lead to the exposure of internal network services, sensitive metadata, or facilitate further attacks against infrastructure that is typically shielded from the public internet. Given the CVSS score of 7.3, this represents a high-risk security flaw that could compromise the confidentiality and integrity of the hosting environment.

Immediate Action: As no official patch is currently available, users should restrict access to the affected ws endpoint via network-level controls or a Web Application Firewall until a security update is released by the maintainers.

Proactive Monitoring: Monitor server logs for unusual outbound traffic patterns originating from the gpt-researcher host, particularly requests directed toward internal IP addresses or sensitive infrastructure.

Compensating Controls: Implement strict egress filtering on the host machine to block unauthorized outbound connections, effectively neutralizing the impact of an SSRF attack.

Public Exploit Available: Yes, a published PoC exists, as documented in the GitHub issue report referenced by the CVE record.

Given the availability of a public proof-of-concept and the lack of a vendor-supplied patch, this vulnerability poses a significant risk to affected installations. Security teams should prioritize limiting the exposure of the gpt-researcher instance and monitor for any signs of unauthorized outbound traffic while awaiting an official upstream fix.