SSRF Vulnerability in AeternaLabsHQ PullMD

AeternaLabsHQ PullMD version 3.2.0 is affected by a Server-Side Request Forgery (SSRF) vulnerability. The vulnerability resides within the REST API component, specifically involving the /api endpoint. An attacker can exploit this by manipulating the 'url' argument, which the application fails to adequately sanitize or validate. This flaw allows remote, unauthenticated actors to force the server to make arbitrary HTTP requests to internal or external resources, potentially leading to unauthorized data access, network scanning, or interaction with internal services that are not directly exposed to the internet. The vulnerability has been addressed in version 3.3.0, and users are strongly advised to upgrade to this version to mitigate the risk associated with CVE-2026-76795.

Impact

The vulnerability carries a CVSS v3.1 base score of 7.3, indicating a significant risk. If exploited, an attacker could abuse the PullMD server as a proxy to reach internal network segments, bypass firewall controls, or access metadata services (like IMDS in cloud environments) to steal credentials or sensitive application data.

Recommendation

• Upgrade AeternaLabsHQ PullMD to version 3.3.0 immediately as specified in the vendor security advisory.
• Implement egress filtering at the network level for the server hosting PullMD to restrict outbound connections to only necessary and known-good external domains or IP addresses.
• Deploy the Sigma rule below to monitor for suspicious requests to the /api endpoint containing anomalous 'url' parameters.