CVE-2024-8952: Composio

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOL_SCRAPE_WEBSITE_CONTENT endpoint. This vulnerability allows an attacker to read files, access AWS metadata, and interact with local services on the system.

Affected products

• Composio Composio: version 0.4.2 only

Published 2025-03-20. Last modified 2026-06-17.