CVE-2026-110719

Portkey AI Gateway versions 1.14.0 through 1.15.2 are vulnerable to a Server-Side Request Forgery (SSRF) . The issue stems from the isValidCustomHost function, which trusts localhost-style hosts when the TRUSTED_CUSTOM_HOSTS environment variable is unset. Unauthenticated attackers can exploit thi...