{"id":"CVE-2026-86259","title":"OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services","summary":"OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url he…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N","cwe":["CWE-306","CWE-918"],"vendor":"THU-MAIC","product":"OpenMAIC","affected":["OpenMAIC < 1.0.1"],"published":"2026-09-06","updated":"2026-09-10","sourceUpdated":"2026-09-10T19:58:20.507","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86259","references":[{"url":"https://github.com/THU-MAIC/OpenMAIC","label":"disclosure@vulncheck.com"},{"url":"https://github.com/THU-MAIC/OpenMAIC/blob/v1.0.0/app/api/generate/image/route.ts#L73-L78","label":"disclosure@vulncheck.com"},{"url":"https://github.com/THU-MAIC/OpenMAIC/blob/v1.0.0/middleware.ts#L60-L63","label":"disclosure@vulncheck.com"},{"url":"https://github.com/THU-MAIC/OpenMAIC/releases/tag/v1.0.1","label":"disclosure@vulncheck.com"},{"url":"https://github.com/THU-MAIC/OpenMAIC/security/advisories/GHSA-9m7h-vh2h-rc3w","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/openmaic-before-1.0.1-ssrf-via-environment-gated-url-validation","label":"disclosure@vulncheck.com"},{"url":"https://github.com/THU-MAIC/OpenMAIC/security/advisories/GHSA-9m7h-vh2h-rc3w","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00254,"epssPercentile":0.17295,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-08T13:34:05.798363Z"},"ingestedAt":"2026-09-07T05:05:30.542Z","exploits":{"github":1,"githubRepos":["https://github.com/uziii2208/CVE-2026-86259"],"checkedAt":"2026-09-21T15:31:02.591Z"},"slug":"CVE-2026-86259","body":"## Overview\n\nOpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud credentials and metadata.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":5538,"id":"CVE-2026-86259","ts":1788887297490,"field":"exploit_available","old":"false","new":"true"},{"seq":4413,"id":"CVE-2026-86259","ts":1788886404768,"field":"exploit_available","old":"true","new":"false"},{"seq":3126,"id":"CVE-2026-86259","ts":1788883068643,"field":"exploit_available","old":"false","new":"true"},{"seq":2155,"id":"CVE-2026-86259","ts":1788882472636,"field":"exploit_available","old":"true","new":"false"},{"seq":299,"id":"CVE-2026-86259","ts":1788881646405,"field":"exploit_available","old":"false","new":"true"}]}