CVE-2026-45310: DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool

May 14, 2026 (updated June 9, 2026)

The fetch_url tool validates the initial URL’s resolved IP address against a restricted-IP blocklist (is_restricted_ip()) to prevent SSRF attacks against internal services (cloud metadata endpoints, localhost, private networks). However, the HTTP client (reqwest) is configured to automatically follow up to 5 redirects (reqwest::redirect::Policy::limited(5)) without re-validating the redirect target against the same SSRF protections.

References

github.com/Hmbown/CodeWhale/security/advisories/GHSA-96ff-gc8g-wpvg
github.com/Hmbown/DeepSeek-TUI/releases/tag/v0.8.22
github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-96ff-gc8g-wpvg
github.com/advisories/GHSA-96ff-gc8g-wpvg
nvd.nist.gov/vuln/detail/CVE-2026-45310

Code Behaviors & Features

Detect and mitigate CVE-2026-45310 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →