What happened
Next AI Draw.io through 0.4.16 contains CVE-2026-72777 (CVSS 8.6, High): the POST /api/parse-url endpoint validates hostnames using only string pattern checks without DNS resolution, allowing unauthenticated attackers to supply hostnames that pass validation but resolve to internal/private network addresses.
Why it matters
This is an AI-assisted diagramming tool exposing an unauthenticated SSRF primitive that can be used to reach internal infrastructure (including cloud metadata services) from the server hosting the AI tool.
Attack vector
Unauthenticated attacker submits a crafted hostname to POST /api/parse-url that passes string validation but resolves via DNS to an internal/private IP address
Affected systems
Next AI Draw.io through 0.4.16
Mitigation
No fixed version confirmed at time of writing; apply network-level egress restrictions and DNS-resolution-aware hostname validation as a workaround