RockteMQ-AI commented on issue #1712:
URL: 
https://github.com/apache/rocketmq-dashboard/issues/1712#issuecomment-5251746859

   **Issue Evaluation**
   
   Category: `type/bug` (security) | Severity: **High** | Status: **Confirmed**
   
   This is a server-side request forgery (SSRF) risk. 
`AuthInterceptor.READER_POST_PATHS` includes `/api/llm/config/test`, which 
allows any authenticated non-admin reader to submit an arbitrary `apiBase` URL 
and cause the Studio backend to initiate an outbound connection to that 
caller-controlled destination.
   
   **Root Cause:** The LLM connection test endpoint was incorrectly placed in 
the reader POST allowlist. Saving LLM configuration is already admin-only, and 
data-source connection tests follow the same admin-only pattern for this exact 
trust-boundary reason.
   
   **Impact:** Non-admin users can trigger the backend to connect to arbitrary 
URLs, potentially probing internal services or exfiltrating data through SSRF.
   
   **Proposed Fix Assessment:** Removing `/api/llm/config/test` from 
`READER_POST_PATHS` and adding an authorization regression test is the correct 
minimal fix.
   
   This is a valid security issue. A fix PR is welcome.
   
   ---
   *Automated evaluation by github-manager*


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to