Beveiligingsadvies

CVE-2026-82638

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-30 13:23:38

Laatst bijgewerkt 2026-09-01 14:03:37

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply publicly resolvable hostnames mapping to private addresses to retrieve cloud metadata and internal service content.

← Alle CVE's bekijken Bekijk op cve.org ↗