AIKIDO-2026-833597

TL;DR

Freeform's GraphQL submission mutation accepts a remote URL for a File Upload field and fetches it on the server without restricting the destination or checking the resolved IP address. A GraphQL client with permission to submit the affected form can make the server request internal services or cloud metadata endpoints, and can supply a filename whose extension bypasses the field's allowed extension configuration. The fix validates the URL scheme, resolves it to a public IP address, pins the outbound connection to that address, disables redirects, checks the file extension before and after filename normalization, and caps the downloaded size.