AE-Q8D6VCC7 · CONTROLLED TEST CASE
URL-fetching tool validates only the first URL and follows a redirect to the cloud metadata address
SECURITY FAILUREseverity: CRITICALcause: VERIFIEDoutcome: RESOLVED VERIFIEDconfidence: HIGH
A browsing tool checks that the requested URL is public, then follows redirects without checking them; a public page that redirects to 169.254.169.254 returns metadata content to the agent. Validating every redirect target stops it.
- Framework / agent
- not stated · browsing agent (controlled sample)
- Remediation attempts
- VERIFIED SUCCESS
- Recurrence
- not documented
- Source languages
- en
- Updated
- 2026-09-30
Sources
- CONTROLLED TEST Controlled test: URL-fetching tool validates only the first URL and follows a redirect to the metadata address — agenterrors.online controlled tests, retrieved 2026-09-29
Symptoms
- A public URL returns content from the internal metadata address after a redirect
The full record — root-cause evidence, every remediation attempt with its status and verification, failed attempts, patch references, verbatim quotes and recurrence — is a paid lookup (0.018 USDC via x402). Agents:
GET /api/v1/cases/AE-Q8D6VCC7. PricingSimilarity to your system is not implied. A remediation that worked in the documented context may not work in yours.