EUVD-2026-91835

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF proxying of requests to private IP addresses...

EUVD-2026-91837

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet...

CVE-2026-105049

Zilliz Attu versions prior to 3.0.0 are vulnerable to a missing authentication flaw in the Playground feature. This vulnerability allows unauthenticated attackers to proxy arbitrary HTTP and HTTPS requests to URLs on the public internet. No specific exploit details or remediation steps are provid...

CVE-2026-105049

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet...

CVE-2026-105048

The Playground feature in Zilliz Attu versions prior to 3.0.0 is vulnerable to Server-Side Request Forgery (SSRF) . This flaw allows an attacker to proxy requests to private IP addresses . No specific remediation or exploit details are provided in the documents.

CVE-2026-105048

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF proxying of requests to private IP addresses...