Zylon PrivateGPT 1.0.1 URI Artifact Loader SSRF

Zylon PrivateGPT versions 1.0.0 and 1.0.1 contain a server-side request forgery vulnerability in the URI Artifact Loader. The proof of concept demonstrates a controlled loopback request. https://packetstorm.news/download/237886...

Exploit for CVE-2026-116000

CVE-2026-116000 — PrivateGPT URI-loader SSRF English | P...

CVE-2026-116000

A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...

CVE-2026-116000 Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery

A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...

EUVD-2026-109329

A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...

CVE-2026-116000 Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery

A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...

CVE-2026-116000 Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery

A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...

CVE-2026-116000

A security flaw exists in Zylon PrivateGPT versions 1.0.0/1.0.1 within the URI Artifact Loader component. The vulnerability is located in the load_file_from_uri function of the file private_gpt/server/ingest/uri_loader.py. By manipulating the Value argument, an attacker can trigger a server-side ...

PT-2026-122934

A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load file from uri of the file private gpt/server/ingest/uri loader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...

EUVD-2025-14244

Malicious code in bioql PyPI...

CVE-2025-4515

A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument alloworigins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the...

CVE-2025-4515

A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument alloworigins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the...

CVE-2025-4515 Zylon PrivateGPT settings.yaml cross-domain policy

A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument alloworigins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the...

CVE-2025-4515

CVE-2025-4515 affects Zylon PrivateGPT up to 0.6.2. The issue resides in an unknown part of settings.yaml where manipulating the allow_origins parameter yields a permissive cross-domain policy with untrusted domains, enabling remote initiation of an attack. Public disclosure exists. Practical imp...

CVE-2025-4515 Zylon PrivateGPT settings.yaml cross-domain policy

A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument alloworigins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the...

CVE-2025-4515 Zylon PrivateGPT settings.yaml cross-domain policy

A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument alloworigins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the...

CVE-2025-4515: Permissive Cross-domain Policy with Untrusted Domains

A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument alloworigins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the...

PT-2025-20641 · Unknown · Zylon Privategpt

Name of the Vulnerable Software and Affected Versions: Zylon PrivateGPT versions up to 0.6.2 Description: A problematic issue was found in Zylon PrivateGPT, affecting an unknown part of the file settings.yaml. The manipulation of the allow origins argument leads to a permissive cross-domain polic...

PrivateGPT resource management error vulnerability

PrivateGPT is an AI project open-sourced by Zylon. A resource management error vulnerability exists in PrivateGPT version 0.5.0, which stems from improper handling of multi-part boundaries when uploading a file, which could lead to a denial of service...