Security
Vercel Quietly Patched an SSRF Hole That Let Agents Be Tricked Into Fetching Internal Servers
Vercel's AI SDK now re-validates every redirect hop before downloading a file. The fix is small. What it signals about agent URL handling as a security boundary is not.
Jun 14, 2026Verified