CVE-2026-51385

CVE-2026-51385 CVE-2026-51385 のアドバイザリです。GRAPHIFY がこのアドバイザリを認識も公開もしていなかったため、公開する必要がありました。MITRE は CVE-2026-51385 を割り当てており、これがそのためのアドバイザリです。 ES: これは私の最初の CVE でした。正直に言うと、ANTI SSRF 関数のロジックを破る方法を自分で見つけました。そして、本当に最初の CVE を公開したかったのです。 そこで、セキュリティにどのように影響するかを考えて影響を示そうと思いました。実行は複雑ですが...

EUVD-2026-75180

Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URL ingestion process. An attacker can access internal or private network resources by crafting a URL containing an ISATAP IPv6 literal that embed...

Server-side Request Forgery (SSRF)

Overview @openclaw/nostr is an OpenClaw Nostr channel plugin for NIP-04 encrypted DMs Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URL ingestion process. An attacker can access internal or private network resources by crafting a URL containing an...

CVE-2026-27170 OpenSift: SSRF risk in URL ingestion endpoint

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.2-alpha and below, URL ingest allows overly permissive server-side fetch behavior and can be coerced into requesting unsafe targets. Potential access/probing of private/local...

CVE-2026-27170

Summary (concrete details): OpenSift versions up to 1.1.2-alpha are affected by a flaw in the URL ingestion flow where server-side fetch behavior is overly permissive. An attacker-controlled URL could cause the host process to probe or access private/local network resources. The issue is fixed in...

CVE-2026-27170 OpenSift: SSRF risk in URL ingestion endpoint

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.2-alpha and below, URL ingest allows overly permissive server-side fetch behavior and can be coerced into requesting unsafe targets. Potential access/probing of private/local...

CVE-2026-27170 OpenSift: SSRF risk in URL ingestion endpoint

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.2-alpha and below, URL ingest allows overly permissive server-side fetch behavior and can be coerced into requesting unsafe targets. Potential access/probing of private/local...