Beveiligingsadvies

CVE-2026-15143

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-10 15:25:09
Laatst bijgewerkt 2026-08-31 13:50:17
Toegewezen door redhat
CVSS-score 9.3
Status PUBLISHED

Beschrijving

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.