Server-side Request Forgery (SSRF) Affecting agentos-taskweaver package, versions [0,]
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsSnyk Learn
Learn about Server-side Request Forgery (SSRF) vulnerabilities in an interactive lesson.
Start learning- Snyk IDSNYK-PYTHON-AGENTOSTASKWEAVER-15127914
- published28 Jan 2026
- disclosed28 Jan 2026
- creditUnknown
Introduced: 28 Jan 2026
CVE NOT AVAILABLE CWE-918 (opens in a new tab)How to fix?
A fix was pushed into the master branch but not yet published.
Overview
agentos-taskweaver is an A code-first agent framework for seamlessly planning and executing data analytics tasks
Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the network configuration process. An attacker can access local services running on the host system by sending crafted requests from within a container environment. This is only exploitable if the application is running in a Docker, Podman, or Containerd container on MacOS or Windows hosts, where special internal hostnames are available to the container.
Workaround
This vulnerability can be mitigated by configuring the container runtime to override the internal hostnames (such as "host.docker.internal") to invalid addresses using the "extra_hosts" parameter.