CVE-2026-45741

🗓️ 19 Aug 2026 14:32:50Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 74 Views🌐 WEB

SSRF in Gotenberg ≤8.32.0 via IPv6 transition prefixes bypasses WithDenyPrivateIPs to reach cloud metadata services.

Reporter	Title	Published	Views	Family All 20
Chainguard	CVE-2026-45741 vulnerabilities	2 Jul 202620:22	–	cgr
Circl	CVE-2026-45741	29 May 202616:14	–	circl
Cvelist	CVE-2026-45741 Gotenberg: SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes	19 Aug 202614:32	–	cvelist
EUVD	EUVD-2026-62422	19 Aug 202614:32	–	euvd
Github Security Blog	Gotenberg has an SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes	29 May 202616:50	–	github
Github Security Blog	Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL	28 Aug 202618:26	–	github
Mend	CVE-2026-45741	19 Aug 202614:32	–	mend
NVD	CVE-2026-45741	19 Aug 202615:17	–	nvd
osv_cga	CGA-6X3P-455F-6FMM	2 Jul 202614:56	–	osv_cga
osv_cga	CGA-F638-J2H3-6J2Q	26 Jun 202611:48	–	osv_cga

Vulners

Node

thecodingmachine gotenbergRange<8.33.0

[
  {
    "vendor": "gotenberg",
    "product": "gotenberg",
    "versions": [
      {
        "version": "< 8.33.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/gotenberg/gotenberg/releases/tag/v8.33.0
github	www.github.com/gotenberg/gotenberg/security/advisories/GHSA-86m8-88fq-xfxp
github	www.github.com/gotenberg/gotenberg/commit/f9a01c9fb308372170ab7fc97b17a118ee8a125c

Parameter	Position	Path	Description	CWE
url	request body	/chromium/convert	The Chromium URL conversion route can be used to reach internal cloud metadata services (e.g., 169.254.169.254) via transition prefixes like 6to4 or NAT64, potentially exposing credentials.	CWE-184, CWE-918

09 Sep 2026 21:13Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.5

EPSS0.00372

SSVC