https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:40:46.256139+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-86259 CVE-2026-86259 — OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation 2026-10-08T06:40:46.272688+00:00

Affected: THU-MAIC OpenMAIC

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud credentials and metadata.