CVE-2026-86539
knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoint that issues outbound requests to caller-supplied destinations without validation. Attackers can enumerate internal hosts and cloud metadata endpoints by observing transport error messages that reveal network reachability information.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 7.2
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
- EPSS probability
- 0.21%
- CWE
- CWE-918
- Published
- 2026-09-07
- Last modified
- 2026-09-11
Affected products
- knowns-dev knowns
Weakness type
Related vulnerabilities
- CVE-2026-89242 — WWBN AVideo Unauthenticated SSRF via login.json.php
- CVE-2026-19486 — SSRF in Gemini Enterprise Agent Platform App Builder
- CVE-2026-54054 — Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects
- CVE-2026-79723 — Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches
- CVE-2026-81207 — DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- CVE-2026-81213 — Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches
- CVE-2026-81265 — Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches
- CVE-2026-82097 — DataStage on Cloud Pak for Data has several vulnerabilities due to open source software