2 matches found
CVE-2026-108719 LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url
LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callbackurl extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the...
5.3CVSS0.00282EPSS
SaveExploits0References6
EUVD-2026-96993
LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callbackurl extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the...
5.3CVSS5.8AI score0.00282EPSS
SaveExploits0References6
20