CVE-2026-108115

Kortix Suna versions 0.10.7 before 0.13.52 are vulnerable to a Server-Side Request Forgery (SSRF) flaw. The root cause is a bypass of the isPrivateIp guard, which can be circumvented by using IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers possessing the project.conn...