RockteMQ-AI commented on issue #1712: URL: https://github.com/apache/rocketmq-dashboard/issues/1712#issuecomment-5251746859
**Issue Evaluation** Category: `type/bug` (security) | Severity: **High** | Status: **Confirmed** This is a server-side request forgery (SSRF) risk. `AuthInterceptor.READER_POST_PATHS` includes `/api/llm/config/test`, which allows any authenticated non-admin reader to submit an arbitrary `apiBase` URL and cause the Studio backend to initiate an outbound connection to that caller-controlled destination. **Root Cause:** The LLM connection test endpoint was incorrectly placed in the reader POST allowlist. Saving LLM configuration is already admin-only, and data-source connection tests follow the same admin-only pattern for this exact trust-boundary reason. **Impact:** Non-admin users can trigger the backend to connect to arbitrary URLs, potentially probing internal services or exfiltrating data through SSRF. **Proposed Fix Assessment:** Removing `/api/llm/config/test` from `READER_POST_PATHS` and adding an authorization regression test is the correct minimal fix. This is a valid security issue. A fix PR is welcome. --- *Automated evaluation by github-manager* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
