CVE-2026-46526

🗓️ 28 May 2026 17:58:22Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 9 Views

Local Deep Research prior to 1.6.10 allowed server side forgery via URL parsing differences despite validation checks.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-46526	28 May 202617:58	–	attackerkb
Circl	CVE-2026-46526	24 May 202607:26	–	circl
CNNVD	Local Deep Research 代码问题漏洞	28 May 202600:00	–	cnnvd
Cvelist	CVE-2026-46526 Local Deep Research: SSRF bypass in `safe_get`	28 May 202617:58	–	cvelist
EUVD	EUVD-2026-32977	28 May 202617:58	–	euvd
Github Security Blog	local-deep-research has an SSRF bypass in `safe_get`	28 May 202619:18	–	github
NVD	CVE-2026-46526	28 May 202619:16	–	nvd
OSV	GHSA-G23J-2VWM-5C25 local-deep-research has an SSRF bypass in `safe_get`	28 May 202619:18	–	osv
Positive Technologies	PT-2026-44472	28 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-46526	29 May 202620:13	–	redhatcve

Vulners

Node

learningcircuit local_deep_researchRange<1.6.10

[
  {
    "vendor": "LearningCircuit",
    "product": "local-deep-research",
    "versions": [
      {
        "version": "< 1.6.10",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/LearningCircuit/local-deep-research/pull/3889
github	www.github.com/LearningCircuit/local-deep-research/releases/tag/v1.6.10
github	www.github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-g23j-2vwm-5c25
github	www.github.com/LearningCircuit/local-deep-research/pull/3932
github	www.github.com/LearningCircuit/local-deep-research/pull/3873
github	www.github.com/LearningCircuit/local-deep-research/pull/3882

01 Jun 2026 18:43Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15

EPSS0.00035

SSVC

CWE-918