Definition
An attack that tricks a web server into making requests to internal or private systems that the attacker cannot directly access. By exploiting the server's trusted position on the network, an attacker can reach internal APIs, metadata services, or databases hidden behind a firewall.
Why it matters
SSRF is particularly dangerous in AI chatbot and agent deployments because these systems often sit between the public internet and private enterprise data sources. A successful SSRF gives attackers a pivot point into the entire internal network.