diff --git a/fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/CreateStageCommand.java b/fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/CreateStageCommand.java
index 55467d9be3b482..da74e925ebf7e9 100644
--- a/fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/CreateStageCommand.java
+++ b/fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/CreateStageCommand.java
@@ -28,6 +28,7 @@
 import org.apache.doris.cloud.proto.Cloud.StagePB;
 import org.apache.doris.cloud.proto.Cloud.StagePB.StageAccessType;
 import org.apache.doris.cloud.proto.Cloud.StagePB.StageType;
+import org.apache.doris.cloud.security.SecurityChecker;
 import org.apache.doris.cloud.storage.RemoteBase;
 import org.apache.doris.cloud.storage.RemoteBase.ObjectInfo;
 import org.apache.doris.common.AnalysisException;
@@ -148,6 +149,7 @@ private void tryConnect(String endpoint) throws Exception {
             String urlStr = "http://" + endpoint;
             // TODO: Server-Side Request Forgery Check is still need?
             URL url = new URL(urlStr);
+            SecurityChecker.getInstance().startSSRFChecking(urlStr);
             connection = (HttpURLConnection) url.openConnection();
             connection.setConnectTimeout(10000);
             connection.connect();
@@ -164,6 +166,7 @@ private void tryConnect(String endpoint) throws Exception {
                     LOG.warn("Failed to disconnect connection, endpoint={}", endpoint, e);
                 }
             }
+            SecurityChecker.getInstance().stopSSRFChecking();
         }
     }