Cyber Resilience

CVE-2025-59346

SSRF in Linuxfoundation Dragonfly ≤ 2.1.0

Published
17 September 2025
Modified
18 September 2025
Patch / advisory
CVSS Score v4 5.5
Click a component to see what it means
Raw vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0023 14th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2025-59346 is a medium-severity SSRF (CWE-918) vulnerability in Linuxfoundation Dragonfly. Its CVSS base score is 5.5 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Network Service Discovery (T1046); ranked at the 14th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-4 (Information Flow Enforcement) and SI-10 (Information Input Validation) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side request forgery (SSRF) vulnerability that enables users to force DragonFly2’s components to make requests to internal services that are otherwise not…

more

accessible to them. The issue arises because the Manager API accepts a user-supplied URL when creating a Preheat job with weak validation, peers can trigger other peers to fetch an arbitrary URL through pieceManager.DownloadSource, and internal HTTP clients follow redirects, allowing a request to a malicious server to be redirected to internal services. This can be used to probe or access internal HTTP endpoints. The vulnerability is fixed in version 2.1.0.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1046 Network Service Discovery Discovery
Adversaries may attempt to get a listing of services running on remote hosts and local network infrastructure devices, including those that may be vulnerable to remote software exploitation.
T1105 Ingress Tool Transfer Command And Control
Adversaries may transfer tools or other files from an external system into a compromised environment.
Why these techniques?

SSRF allows forcing Dragonfly components to probe/access internal HTTP endpoints (T1046 Network Service Discovery) and fetch arbitrary URLs, facilitating ingress of tools or payloads from external sources (T1105 Ingress Tool Transfer).

MITRE ATLAS TechniquesAI

MITRE ATLAS techniques

AML.T0010: AI Supply Chain CompromiseAML.T0016: Obtain CapabilitiesAML.T0040: AI Model Inference API AccessAML.T0024: Exfiltration via AI Inference API

CVEs Like This One

CVE-2025-59350Same product: Linuxfoundation Dragonfly
CVE-2026-24124Same product: Linuxfoundation Dragonfly
CVE-2025-59345Same product: Linuxfoundation Dragonfly
CVE-2025-59352Same product: Linuxfoundation Dragonfly
CVE-2023-27584Same product: Linuxfoundation Dragonfly
CVE-2025-59347Same product: Linuxfoundation Dragonfly
CVE-2025-59348Same product: Linuxfoundation Dragonfly
CVE-2025-59410Same product: Linuxfoundation Dragonfly
CVE-2025-59351Same product: Linuxfoundation Dragonfly
CVE-2025-59349Same product: Linuxfoundation Dragonfly

Affected Assets

linuxfoundation
dragonfly
≤ 2.1.0

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SI-10 Information Input Validation
  • AC-4 Information Flow Enforcement
  • SC-7 Boundary Protection
Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V1.3.6
  • V1.5.3
  • V5.3.2
  • V10.4.7

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly requires validation of user-supplied URLs in the Preheat API to block malformed or internal-target addresses that enable SSRF.

prevent

Enforces information-flow policies that deny the Manager and pieceManager components from initiating requests to internal endpoints not authorized for external users.

prevent

Boundary-protection mechanisms can be configured to block or filter the unauthorized outbound connections to internal HTTP services that the SSRF attack attempts to reach.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure development practices directly include input validation and destination allow-listing that prevent SSRF.

DE.CM-09 partial match
prevents

Runtime monitoring of web applications and services can detect anomalous outbound requests indicative of SSRF.

ID.RA-01 partial match
prevents

Vulnerability identification processes can discover and record SSRF flaws in web applications.

PR.IR-01 partial match
prevents

Network segmentation and egress controls can limit the damage from successful SSRF requests.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

prevents

Operational threat data describing SSRF campaigns can be used to tighten outbound-request allow-lists and detection rules before attackers exploit them.

References