What happened
Verified via NVD REST API (published 2026-10-14, CVSS 5.4 v3.1 / 5.3 v4.0, status Deferred). Niche but concrete AI-module SSRF in a widely used China-market admin framework.
Why it matters
AI image/code-generation endpoints that fetch user-supplied URLs are a recurring SSRF class in AI web apps; here it lets an authenticated low-priv user pivot from the AI module into the internal network and cloud metadata of a busy admin platform.
Attack vector
Authenticated SSRF (CWE-918) in the AI image-generation service: attacker-controlled referImageUrl is fetched server-side without host validation, reaching internal/cloud-metadata targets whose responses are observable.
Affected systems
YunaiV/ruoyi-vue-pro through 2026.09
Mitigation
Validate/resolve referImageUrl against an allowlist, reject private/loopback/metadata addresses, and restrict the AI service egress; watch for a patched release given Deferred status.