CVE-2026-111320

ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider baseurl. Attackers can set baseurl via the provider config endpoint and trigger POST /api/v1/models/check to...

CVE-2026-111320

ValueCell versions through 0.1.20 are vulnerable to an unauthenticated server-side request forgery (SSRF) vulnerability. The root cause is the use of an unvalidated provider base_url that can be set via the provider configuration endpoint. Remote attackers can exploit this by triggering a POST /a...