AIKIDO-2026-789112

TL;DR

Remote JSON Schema and OpenAPI $ref values pointing at HTTP(S) URLs are fetched through the shared HTTP helper when remote references are allowed. With the [http] extra installed, a schema document supplied by an attacker can trigger fetches to internal services and embed the response into generated code without the developer typing a URL. Before the fix, the default allow_remote_refs behavior still fetched remote refs after only a deprecation warning. The fix applies the shared URL and redirect validation so non-public targets are blocked unless private network access is explicitly enabled.