Symptom
An agent with the fetch server can be told, or redirected, to read internal addresses.
Evidence what you'll see
- Server follows redirects
- No check for private, link-local or metadata IPs
Cause
URLs chosen by the model were fetched with redirects on and no egress filter.
Fix steps
0 of 3 done
Your check marks stay in this browser only.
Verify the fix worked
- A request to 127.0.0.1 or 169.254.169.254 is refused.
Did this fix it?
Sources and credit
Summarized in our own words from these public reports. Credit goes to their authors.
Provided as is, without warranty. Test in a non-production environment and back up first. Security-related steps: verify against the official docs. Terms · Request removal or attribution change