Zevorn rt-claw Server-Side Request Forgery Vulnerability in http_request Tool

A server-side request forgery (SSRF) vulnerability has been identified in Zevorn rt-claw versions through 0.2.0. The issue arises in the http_request component, specifically within the claw_net_get and claw_net_post functions in claw/services/tools/net.c. The vulnerability allows for arbitrary outbound HTTP requests to be made to internal or localhost resources, with the response being returned to the user. This exploitation can be performed remotely, and the vulnerability has been publicly disclosed.

Impact

Exploitation of this vulnerability allows an attacker to make internal HTTP requests from the vulnerable device, accessing localhost or other internal network resources. The responses from these requests are leaked back to the user, creating a direct channel for probing and extracting information from private services or endpoints.

Reproduction

The vulnerability can be reproduced by influencing the ai_chat() function to include a tool call that uses the http_request tool. This can be done by sending a prompt that triggers the tool with a URL parameter pointing to a localhost or internal resource. The response from the fetched URL will be returned through the chat output, demonstrating the SSRF exploitation.