CVE-2026-102879

The ClaraVerse software, up to version 0.3.1 , is vulnerable to a Server-Side Request Forgery (SSRF) protection bypass within the download_file and scrape_web agent tools. The root cause allows authenticated users to circumvent hostname validation and IPv6 transition address filtering. This enabl...