EUVD-2026-102566

Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.downloadurl and fs.uploadurl transfer URLs from the unvalidated Host header. Attackers who control the Host header seen on a victim's MCP request can redirect file uploads or capture...

CVE-2026-111385

Nezha versions 2.1.0 before 2.3.15 are vulnerable to a Host Header Injection in the mintTransferTool component. The vulnerability occurs because the application builds fs.download_url and fs.upload_url transfer URLs using an unvalidated Host header . An attacker controlling the Host header in a v...