By forcing the OpenMAIC server to redirect requests to internal endpoints, specifically cloud instance metadata services (such as those hosted on 169.254.169.254 in AWS, GCP, or Azure environments), an attacker can retrieve sensitive information, including temporary cloud identity credentials, environment variables, and instance configuration data. This vulnerability is particularly critical for deployments that rely on non-production builds for testing or staging purposes, as it provides a direct pathway for lateral movement and privilege escalation within the cloud environment.

Impact

Successful exploitation allows unauthenticated attackers to retrieve sensitive cloud credentials and metadata, potentially leading to full compromise of the affected cloud instance's identity and subsequent unauthorized access to broader cloud infrastructure.

Recommendation

• Upgrade all OpenMAIC installations to version 1.0.1 or later immediately to patch the SSRF validation logic.
• Audit all non-production deployments of OpenMAIC to ensure they are not exposed to the public internet.
• Implement egress filtering at the cloud network layer to block access to sensitive metadata services (169.254.169.254) from non-essential application containers or VMs.
• Review logs for HTTP requests containing suspicious values in the 'x-base-url' header or 'baseUrl' parameter directed at internal network resources.