What happened
NVD published CVE-2026-18973 (CVSS 7.3, High) on August 6, 2026, and public PoC/exploit details were disclosed for an SSRF flaw in the extension-proxy component of the super-agent-party framework.
Why it matters
SSRF in an agent's extension/plugin proxy can be used to pivot into internal cloud metadata services or internal-only APIs, a common path to credential theft in cloud-hosted agent deployments.
Attack vector
The sanitize_proxy_url function in the extension_proxy route detects private-network targets but only logs rather than rejecting them, allowing a remote attacker to force the server to make arbitrary internal HTTP requests (SSRF).
Affected systems
heshengtao super-agent-party ≤ 0.4.1
Mitigation
Upgrade to a patched super-agent-party release; block outbound requests to private IP ranges at the network layer as a compensating control.