Vulnerability · Published Mar 20, 2025 · Assigned by @huntr_ai

CVE-2024-11603Server-Side Request Forgery in lm-sys/fastchat

High 7.5

In plain English

A high-severity server-side request forgery in lm-sys/fastchat from lm-sys. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.0)7.5High

Exploit odds (30 days)0.7%top 46.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A Server-Side Request Forgery (SSRF) vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the `/queue/join?` endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal networks or the AWS metadata endpoint, potentially exposing sensitive data and compromising internal servers.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	fschat	no fix listed	GHSA-h254-g997-685c
PyPI	fschat	no fix listed	PYSEC-2026-1397

Affected products (as reported)

Vendor	Product	Versions
lm-sys	lm-sys/fastchat	unspecified – through latest

Weakness: CWE-918 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://huntr.com/bounties/89f1158d-4a75-4000-a1bd-f82dd1a62bff