# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass](https://agentprime.io/advisories/CVE-2026-92813.md)
  `CVE-2026-92813` · CVE record: metabase Metabase · CVSS 6.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Nango through 0.70.4 Server-Side Request Forgery via Configuration](https://agentprime.io/advisories/CVE-2026-92804.md)
  `CVE-2026-92804` · CVE record: NangoHQ Nango · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin](https://agentprime.io/advisories/CVE-2026-92795.md)
  `CVE-2026-92795` · CVE record: coze-dev coze-studio · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect](https://agentprime.io/advisories/CVE-2026-92789.md)
  `CVE-2026-92789` · CVE record: Graylog2 graylog2-server · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch](https://agentprime.io/advisories/CVE-2026-92775.md)
  `CVE-2026-92775` · CVE record: requarks Wiki.js · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [chatwoot Shopify OAuth callbacks_controller.rb server-side request forgery](https://agentprime.io/advisories/CVE-2026-92527.md)
  `CVE-2026-92527` · CVE record: chatwoot · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise](https://agentprime.io/advisories/CVE-2026-92808.md)
  `CVE-2026-92808` · CVE record: Altium Altium Enterprise Server · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass, Server-side request forgery (SSRF)
- [Tanium addressed a server-side request forgery vulnerability in Threat Response.](https://agentprime.io/advisories/CVE-2026-87116.md)
  `CVE-2026-87116` · CVE record: Tanium Threat Response · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2026-68536.md)
  `CVE-2026-68536` · CVE record: Apache Software Foundation Apache MyFaces · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Quickwit through 0.9.0 SSRF via SQS queue_url Parameter](https://agentprime.io/advisories/CVE-2026-92719.md)
  `CVE-2026-92719` · CVE record: quickwit-oss quickwit · CVSS 8.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL](https://agentprime.io/advisories/CVE-2026-92602.md)
  `CVE-2026-92602` · CVE record: TDuckCloud tduck-survey-form · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Hippo4j through 1.5.0 SSRF via clientAddress Parameter](https://agentprime.io/advisories/CVE-2026-92569.md)
  `CVE-2026-92569` · CVE record: opengoofy hippo4j · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [MLRun through 1.11.0 Server-Side Request Forgery via Webhook](https://agentprime.io/advisories/CVE-2026-92568.md)
  `CVE-2026-92568` · CVE record: mlrun mlrun · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [DataGear through 6.0.0 Unauthenticated SSRF via HTTP Dataset Preview](https://agentprime.io/advisories/CVE-2026-92566.md)
  `CVE-2026-92566` · CVE record: datageartech datagear · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery](https://agentprime.io/advisories/CVE-2026-92380.md)
  `CVE-2026-92380` · CVE record: WuzhiCMS · CVSS 6.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Jenkins Project Jenkins Bitbucket Push and Pull Request Plugin](https://agentprime.io/advisories/CVE-2026-92139.md)
  `CVE-2026-92139` · CVE record: Jenkins Project Jenkins Bitbucket Push and Pull Request Plugin · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling](https://agentprime.io/advisories/CVE-2026-76559.md)
  `CVE-2026-76559` · CVE record: Unknown WP Import Export Lite · CVSS 4.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery](https://agentprime.io/advisories/CVE-2026-92215.md)
  `CVE-2026-92215` · CVE record: a2ui-project a2ui · CVSS 6.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0.](https://agentprime.io/advisories/CVE-2025-56563.md)
  `CVE-2025-56563` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery](https://agentprime.io/advisories/CVE-2026-92184.md)
  `CVE-2026-92184` · CVE record: ag-ui-protocol ag-ui · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery](https://agentprime.io/advisories/GHSA-2h44-8472-frjj.md)
  `GHSA-2h44-8472-frjj`, `CVE-2026-61559` · npm `@zereight/mcp-gitlab`: affected `>=0.0.1, <2.1.27`, fixed in `2.1.27` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints](https://agentprime.io/advisories/CVE-2026-54544.md)
  `CVE-2026-54544` · CVE record: ShaneIsrael fireshare · CVSS 7.2 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Concrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use different ports](https://agentprime.io/advisories/CVE-2026-18424.md)
  `CVE-2026-18424` · CVE record: Concrete CMS Concrete CMS · CVSS 2.1 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [OpenCTI: Synchronizer SSRF: stream fetch has no URL validation](https://agentprime.io/advisories/CVE-2026-76820.md)
  `CVE-2026-76820` · CVE record: OpenCTI-Platform opencti · CVSS 7.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN Orchestrator](https://agentprime.io/advisories/CVE-2026-76680.md)
  `CVE-2026-76680` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 8.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2026-19504.md)
  `CVE-2026-19504` · CVE record: Fabric.js Fabric.js · CVSS 4.0 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts](https://agentprime.io/advisories/EEF-CVE-2026-77866.md)
  `EEF-CVE-2026-77866`, `CVE-2026-77866` · Hex `safeurl`: affected `>=0.1.0`, no fixed version yet · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-636
- [AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL](https://agentprime.io/advisories/CVE-2026-91967.md)
  `CVE-2026-91967` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [AVideo through 29.0 Unauthenticated SSRF via Host Header](https://agentprime.io/advisories/CVE-2026-91966.md)
  `CVE-2026-91966` · CVE record: WWBN AVideo · CVSS 6.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy](https://agentprime.io/advisories/CVE-2026-91943.md)
  `CVE-2026-91943` · CVE record: unclecode crawl4ai · CVSS 8.3 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Flowise before 3.1.4 Server-Side Request Forgery via document loaders](https://agentprime.io/advisories/CVE-2026-91938.md)
  `CVE-2026-91938` · CVE record: FlowiseAI Flowise · CVSS 7.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes](https://agentprime.io/advisories/CVE-2026-91935.md)
  `CVE-2026-91935` · CVE record: FlowiseAI Flowise · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [KubeSphere through 4.1.3 SSRF via git credential verification endpoint](https://agentprime.io/advisories/CVE-2026-91923.md)
  `CVE-2026-91923` · CVE record: kubesphere kubesphere · CVSS 8.3 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects](https://agentprime.io/advisories/CVE-2026-91750.md)
  `CVE-2026-91750` · CVE record: Tencent WeKnora · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request.](https://agentprime.io/advisories/CVE-2026-79425.md)
  `CVE-2026-79425` · CVE record · CVSS 8.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Refly through 1.1.0 Server-Side Request Forgery via scrape endpoint](https://agentprime.io/advisories/CVE-2026-91199.md)
  `CVE-2026-91199` · CVE record: refly-ai refly · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Incomplete Security Scanner Blocklist Enables Network-Based Code Execution](https://agentprime.io/advisories/CVE-2026-12944.md)
  `CVE-2026-12944` · CVE record: IBM Langflow OSS · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components](https://agentprime.io/advisories/CVE-2026-12765.md)
  `CVE-2026-12765` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components](https://agentprime.io/advisories/CVE-2026-12766.md)
  `CVE-2026-12766` · CVE record: IBM Langflow OSS · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches](https://agentprime.io/advisories/CVE-2026-12767.md)
  `CVE-2026-12767` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [netease-youdao LobsterAI Browser Network Configuration openclawConfigSync.ts OpenClawConfigSync.buildBrowserConfig server-side request forgery](https://agentprime.io/advisories/CVE-2026-90818.md)
  `CVE-2026-90818` · CVE record: netease-youdao LobsterAI · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-15887.md)
  `CVE-2026-15887` · CVE record: IBM WebSphere Application Server · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery](https://agentprime.io/advisories/CVE-2026-90814.md)
  `CVE-2026-90814` · CVE record: cosmicstack-labs mercury-agent · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Docs through 5.6.1 SSRF via Unauthenticated cors-proxy Endpoint](https://agentprime.io/advisories/CVE-2026-91081.md)
  `CVE-2026-91081` · CVE record: suitenumerique docs · CVSS 6.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Huly Platform through 0.7.426 SSRF via Print Service](https://agentprime.io/advisories/CVE-2026-91079.md)
  `CVE-2026-91079` · CVE record: hcengineering platform · CVSS 6.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [October CMS: Incomplete Scheme Validation in Image Resizer](https://agentprime.io/advisories/GHSA-2xmm-m4wv-3fjh.md)
  `GHSA-2xmm-m4wv-3fjh`, `CVE-2026-100909`, `PKSA-dqgv-qnp4-9j5k` · Packagist `october/october`: affected `>=4.3.0, <4.3.5`, fixed in `4.3.5` · CVSS 6.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [a2aproject a2a-python Push Notification Sender base_push_notification_sender.py \_dispatch_notification server-side request forgery](https://agentprime.io/advisories/CVE-2026-90790.md)
  `CVE-2026-90790` · CVE record: a2aproject a2a-python · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [taisan tarzan-cms Theme Download Function ThemeService.java openConnection server-side request forgery](https://agentprime.io/advisories/CVE-2026-90710.md)
  `CVE-2026-90710` · CVE record: taisan tarzan-cms · CVSS 6.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in OpenStack Glance](https://agentprime.io/advisories/CVE-2026-71198.md)
  `CVE-2026-71198` · CVE record: OpenStack Glance · CVSS 7.0 High · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery](https://agentprime.io/advisories/CVE-2026-90580.md)
  `CVE-2026-90580` · CVE record: FlowiseAI Flowise · CVSS 5.3 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Open Notebook before 1.11.0 Server-Side Request Forgery via link-source](https://agentprime.io/advisories/CVE-2026-90769.md)
  `CVE-2026-90769` · CVE record: lfnovo open-notebook · CVSS 8.3 High · Not analysed yet · Published 13 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [openstatusHQ openstatus resolve-custom-domain-rewrite.ts server-side request forgery](https://agentprime.io/advisories/CVE-2026-90486.md)
  `CVE-2026-90486` · CVE record: openstatusHQ openstatus · CVSS 5.3 Medium · Not analysed yet · Published 12 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix](https://agentprime.io/advisories/GHSA-65h7-9wrw-629c.md)
  `GHSA-65h7-9wrw-629c`, `CVE-2026-59973` · npm `frontmcp` and 2 more: affected `>=1.2.1, <1.5.0`, fixed in `1.5.0` · CVSS 8.5 High · Not analysed yet · Published 11 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery in Malcolm](https://agentprime.io/advisories/CVE-2026-90446.md)
  `CVE-2026-90446` · CVE record: CISA Malcolm · CVSS 5.3 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypass](https://agentprime.io/advisories/CVE-2026-54166.md)
  `CVE-2026-54166` · CVE record: Shelf-nu shelf.nu · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [WWBN AVideo Unauthenticated SSRF via login.json.php](https://agentprime.io/advisories/CVE-2026-89242.md)
  `CVE-2026-89242` · CVE record: WWBN AVideo · CVSS 6.9 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [SSRF in Gemini Enterprise Agent Platform App Builder](https://agentprime.io/advisories/CVE-2026-19486.md)
  `CVE-2026-19486` · CVE record: Google Cloud Gemini Enterprise Agent Platform App Builder · CVSS 8.7 High · Not analysed yet · Published 11 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url](https://agentprime.io/advisories/GHSA-wfgq-w7cq-qj7j.md)
  `GHSA-wfgq-w7cq-qj7j` · crates.io `mistralrs-server-core`: affected `<0.8.18`, fixed in `0.8.18` · CVSS 7.2 High · Not analysed yet · Published 10 Sept 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects](https://agentprime.io/advisories/CVE-2026-54054.md)
  `CVE-2026-54054` · CVE record: transmute-app transmute · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches](https://agentprime.io/advisories/CVE-2026-79723.md)
  `CVE-2026-79723` · CVE record: IBM Langflow OSS · CVSS 5.0 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA5LTEwVDIxOjQxOjM3LjU1NzAwMFoiLCJDVkUtMjAyNi03OTcyMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA5LTE2VDIwOjMzOjAwLjQwMjAwMFoiLCJDVkUtMjAyNi05MjgxNSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA5LTE2VDIwOjMzOjAwLjQwMjAwMFoiLCJDVkUtMjAyNi05MjgxNSJd>. Everything for agents: <https://agentprime.io/llms.txt>.