---
id: CVE-2026-85675
title: >-
  OWL's DocumentProcessingToolkit contains a server-side request forgery
  vulnerability in the extract_document_content tool that fetches
  caller-supplied URLs with no scheme, host, or IP filtering
summary: >-
  OWL's DocumentProcessingToolkit contains a server-side request forgery
  vulnerability in the extract_document_content tool that fetches
  caller-supplied URLs with no scheme, host, or IP filtering. Attackers can
  inject malicious URLs throug…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-918
published: '2026-09-04'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T20:43:32.537'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-85675'
references:
  - url: 'https://github.com/camel-ai/owl'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/camel-ai/owl/blob/fba1dd5b3a9e8cc15f16221bb002cca7e3de2d9d/owl/utils/document_toolkit.py
    label: disclosure@vulncheck.com
  - url: 'https://github.com/camel-ai/owl/issues/615'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/owl-documentprocessingtoolkit-server-side-request-forgery-via-url-fetching
    label: disclosure@vulncheck.com
tags:
  - nvd
epss: 0.00482
epssPercentile: 0.3887
ingestedAt: '2026-09-24T20:51:40.244Z'
---

## Overview

OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or IP filtering. Attackers can inject malicious URLs through prompt injection to make the server fetch internal resources, with responses returned to the agent context.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.