AIKIDO-2026-783472
lightrag-hku is vulnerable to Server-Side Request Forgery (SSRF)
71
CVE Score
High
Server-Side Request Forgery (SSRF)
TL;DR
LightRAG's native markdown parser in lightrag/parser/markdown/parser.py downloads external images referenced by uploaded markdown or textpack documents. The _validated_addresses SSRF guard resolves the image host and rejects non-global addresses, but evaluates the raw resolved address without decoding IPv6-transition wrappers such as NAT64 64:ff9b::/96, IPv4-compatible ::a.b.c.d, or 6to4 2002::/16 that embed an internal IPv4. On a host with NAT64/DNS64 routing, a wrapped address is classified as globally routable and the request is delivered to the embedded internal target, exposing loopback services, RFC1918 hosts, and cloud metadata endpoints. The fix decodes the embedded IPv4 and default-denies untrustworthy wrapper blocks before the global-routability check.
How do I fix this?
Upgrade the lightrag-hku library to the patch version.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you allow document uploads processed by the native markdown parser with image download enabled on a host that has NAT64/DNS64 routing.
Package
Versions
0.0.1 - 1.5.4
Fixed in 1.5.5Background info
lightrag-hku is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.1 - 1.5.4.
Links
GitHub Release
Fix Commits
github.com/HKUDS/LightRAG/commit/9207e7fd10cf6df3cf26e3dd1921490b34a2f132github.com/HKUDS/LightRAG/commit/a25862177a9b00e0edb870778a42b4155924de09github.com/HKUDS/LightRAG/commit/c598545aa0084a427bcb19a84ade5e0ec31fa673
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.