{"id":"CVE-2026-82270","title":"Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/* route that lacks requestValidator middleware","summary":"Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/* route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward …","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-918"],"vendor":"Portkey-AI","product":"@portkey-ai/gateway","affected":["@portkey-ai/gateway >= 1.14.0 <= 1.15.2"],"published":"2026-08-28","updated":"2026-09-24","sourceUpdated":"2026-09-24T20:43:32.537","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-82270","references":[{"url":"https://github.com/Portkey-AI/gateway","label":"disclosure@vulncheck.com"},{"url":"https://github.com/Portkey-AI/gateway/blob/669825cbe89ee51569918b8f78a9db486fd69dd4/src/index.ts","label":"disclosure@vulncheck.com"},{"url":"https://github.com/Portkey-AI/gateway/issues/1718","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/portkey-ai-gateway-server-side-request-forgery-via-v1-proxy","label":"disclosure@vulncheck.com"}],"tags":["nvd","cve.org"],"epss":0.00482,"epssPercentile":0.38871,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-08-31T18:44:19.539683Z"},"ingestedAt":"2026-09-24T15:45:56.694Z","slug":"CVE-2026-82270","body":"## Overview\n\nPortkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/* route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal services and exfiltrate provider API keys.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}