A Server-Side Request Forgery (SSRF) vulnerability in the SearxNG / "search_web" search tools allows an attacker to make the server perform requests to arbitrary internal endpoints and read the responses back. The "searxng_url" argument is passed directly to "requests.get()" with no validation of scheme, host, or port. Because "searxng_url" is exposed to the LLM as a tool parameter and "search_web" / "searxng_search" are part of the default agent toolset, the vulnerability is reachable through prompt injection in any content an agent ingests (web pages, files, tool output). This enables reading internal services and APIs, internal host/port enumeration, and in cloud environments reachability of the instance metadata endpoint (169.254.169.254) with potential IAM/credential exposure.