{"id":"CVE-2026-15143","title":"Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)","summary":"A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can l…","severity":"critical","cvss":9.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","cvssSource":"cna","cwe":["CWE-918"],"vendor":"Red Hat","product":"guardrails-detectors","affected":["guardrails-detectors < 985c6d5a4a84360ff8b447b94e4a3cdfbda3da90","rhoai/odh-built-in-detector-rhel9 (all versions)","rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 (all versions)"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-07-10T15:42:19.456726Z"},"published":"2026-07-10","updated":"2026-10-19","sourceUpdated":"2026-10-19T11:09:34.007Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-15143","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:84734","label":"RHSA-2026:84734"},{"url":"https://access.redhat.com/security/cve/CVE-2026-15143"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2498165","label":"RHBZ#2498165"}],"tags":["cve.org"],"epss":0.00432,"epssPercentile":0.36051,"ingestedAt":"2026-10-19T12:27:23.805Z","slug":"CVE-2026-15143","body":"## Overview\n\nA flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.\n\n## Affected\n\n- `guardrails-detectors < 985c6d5a4a84360ff8b447b94e4a3cdfbda3da90`\n- `rhoai/odh-built-in-detector-rhel9 (all versions)`\n- `rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":51,"depthScoreParts":{"impact":51.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}