CVE-2025-32013: LNbits Server-Side Request Forgery via LNURL Authentication Callback

LNbits is a Lightning Network wallet and accounts system. Its LNURL authentication flow accepts a callback URL from the client and fetches it with the httpx library, following redirects, with no check on where the URL points.

An unauthenticated attacker supplies an internal address and LNbits makes the request for them. That reaches services on the private network and cloud metadata endpoints that the attacker could not reach directly. The GitHub advisory carries a CVSS 4.0 score of 9.3.