ZimaOS 存在服务器端请求伪造 (SSRF) 漏洞

The SSRF vulnerability in ZimaOS allows an attacker with local, authenticated access to craft requests that bypass intended security boundaries. By manipulating the target URL, an attacker can send requests to internal services that are not meant to be accessible from the outside. This could include accessing internal APIs, databases, or other sensitive resources. The potential impact ranges from information disclosure to potentially gaining control over internal systems, depending on the services exposed and the attacker's ability to exploit them. This vulnerability shares similarities with other SSRF exploits where internal network scanning and service discovery are leveraged to identify exploitable targets.

Organizations and individuals deploying ZimaOS in environments with sensitive internal services are at risk. This includes users who have not yet upgraded to version 1.5.0 and those who have not implemented compensating controls such as network segmentation or WAF rules to restrict outbound traffic.

• linux / server:

journalctl -u zimaos | grep -i "internal ip address"

• linux / server:

ps aux | grep -i "internal ip address"

• generic web:

curl -I http://<zimaos_ip>/internal_service_endpoint

• generic web:

 grep -i "internal ip address" /var/log/nginx/access.log

1. 2026-03-02Disclosure

   disclosure

1. 已保留2025-11-03
2. 发布日期2026-03-02
3. 修改日期2026-03-03
4. EPSS 更新日期2026-03-23

The primary mitigation for CVE-2025-64427 is to upgrade ZimaOS to version 1.5.0 or later, which includes the necessary fixes to prevent the SSRF vulnerability. If upgrading is not immediately feasible, consider implementing temporary workarounds such as restricting outbound network access from the ZimaOS instance using a firewall or network segmentation. Additionally, configure a Web Application Firewall (WAF) to filter requests containing suspicious URLs or internal IP addresses. Regularly review and audit ZimaOS configurations to ensure adherence to security best practices.