Issue Station
Sign In
Tools hereToolbox

hermes - 💡(How to fix) Fix [Bug]: web_extract falsely blocks cdimage.ubuntu.com as "private/internal network" [1 pull requests]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…

Error Message

"error": "Blocked: URL targets a private or internal network address"

Fix Action

Fixed

Code Example

{
  "error": "Blocked: URL targets a private or internal network address"
}
RAW_BUFFERClick to expand / collapse

Bug Description

web_extract tool returns Blocked: URL targets a private or internal network address when accessing https://cdimage.ubuntu.com/ubuntu/releases/26.04/release/.

This is a public Ubuntu mirror site, not a private/internal address. The tool's SSRF protection is incorrectly flagging this domain.

Steps to Reproduce

Call web_extract with URL: https://cdimage.ubuntu.com/ubuntu/releases/26.04/release/

Expected Behavior

Successfully extract page content, as this is a public website.

Actual Behavior

{
  "error": "Blocked: URL targets a private or internal network address"
}

Environment

  • Host: macOS 26.5
  • Hermes Agent: default profile

Additional Context

The browser_navigate tool works fine with the same URL, so this is specific to web_extract's URL validation logic. Likely a DNS resolution or IP range check issue in the SSRF filter.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

hermes - 💡(How to fix) Fix [Bug]: web_extract falsely blocks cdimage.ubuntu.com as "private/internal network" [1 pull requests]