Affected by GO-2026-5996 and 2 other vulnerabilities

GO-2026-5996: ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway in github.com/stacklok/toolhive

GO-2026-6002: ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) in github.com/stacklok/toolhive

GO-2026-6526: ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive

proxy

package

v0.25.0 Latest Latest Go to latest Published: Apr 28, 2026 License: Apache-2.0 Imports: 12 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/stacklok/toolhive

Links

Open Source Insights

Documentation ¶

Overview ¶

Package proxy implements the LLM gateway localhost reverse proxy.

Index ¶

type Proxy
- func New(cfg *llm.Config, ts TokenSource) (*Proxy, error)
- func (p *Proxy) Addr() string
- func (p *Proxy) Start(ctx context.Context) error
type TokenSource

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Proxy ¶

type Proxy struct {
	// contains filtered or unexported fields
}

Proxy is a localhost reverse proxy that strips incoming Authorization headers and injects fresh OIDC tokens before forwarding to the LLM gateway.

func New ¶

func New(cfg *llm.Config, ts TokenSource) (*Proxy, error)

New creates a Proxy and binds the TCP listener immediately so that Addr() returns the correct address before Start is called. Returns an error if GatewayURL is unparsable, the listen address is not loopback, or the port is already in use.

func (*Proxy) Addr ¶

func (p *Proxy) Addr() string

Addr returns the actual bound listen address (e.g. "127.0.0.1:14000").

func (*Proxy) Start ¶

func (p *Proxy) Start(ctx context.Context) error

Start begins serving using the listener bound in New. It blocks until ctx is cancelled, then performs a graceful shutdown with a 5-second timeout.

type TokenSource ¶

type TokenSource interface {
	Token(ctx context.Context) (string, error)
}

TokenSource obtains fresh OIDC access tokens for the LLM gateway. *llm.TokenSource satisfies this interface.

Source Files ¶

View all Source files

proxy.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL