The Red Agent POV: How it Reasoned its Way to SSRF

**Executive summary:** This blog post describes a high-impact SSRF-to-local-file-read vulnerability against a GCP Cloud Run service in which a GitHub blob URL validator was bypassed by appending // followed by an absolute path, allowing unauthenticated retrieval of environment variables and full application source (e.g., /proc/self/environ and /var/task/graph_api.py); the Red Agent discovered and validated the issue after iterative probing (≈96 requests) and demonstrated returned payloads and sizes.