{"id":86190,"date":"2026-01-02T23:06:10","date_gmt":"2026-01-02T23:06:10","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2025-3572-server-side-request-forgery-vulnerability-in-smartrobot-from-intumit","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-3572-server-side-request-forgery-vulnerability-in-smartrobot-from-intumit\/","title":{"rendered":"CVE-2025-3572: Server-Side Request Forgery Vulnerability in SmartRobot from INTUMIT<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2025-3572 is a significant server-side request forgery vulnerability discovered in INTUMIT’s SmartRobot. It poses a direct threat to the security of network systems using this product, allowing remote unauthenticated attackers the potential to probe internal networks and access local files on the server. This vulnerability is of particular concern due to its potential for data leakage or even full system compromise.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-3572
\nSeverity: High (7.5 CVSS score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Unauthenticated remote attackers can probe internal networks and access local files on the server, possibly leading to system compromise and data leakage.<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n