What happened
Published 2026-08-20 (CVSS 8.2, High), this SSRF vulnerability lets attacker-controlled HTML (potentially including AI-generated content) processed by Plate's docx-io conversion library cause the server to fetch internal-network resources.
Why it matters
Plate markets itself explicitly as an AI-integrated editor; content passed through AI generation/completion features and then exported server-side to DOCX can carry attacker-influenced image URLs, making this a concrete AI-content-to-SSRF pipeline risk for document-generation features in AI writing assistants.
Attack vector
htmlToDocxBlob fetches remote image URLs embedded in attacker-controlled HTML during server-side or privileged DOCX conversion, allowing the converter to make requests to internal network resources and include the fetched response in the generated document.
Affected systems
@platejs/docx-io prior to Plate 53.3.2
Mitigation
Upgrade to Plate ≥53.3.2; restrict or allowlist outbound image-fetch destinations during server-side document conversion.