CVE-2024-8955: Composio

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the contents of any file in the system by exploiting the BROWSERTOOL_GOTO_PAGE and BROWSERTOOL_GET_PAGE_DETAILS actions.

Affected products

• Composio Composio: version 0.4.4 only

Published 2025-03-20. Last modified 2026-06-17.